[OpenID] What about spam?

Patrick Aljord patcito at gmail.com
Sat May 5 13:40:21 UTC 2007


Hey all,
On the openID FAQ here http://openid.net/about.bml
it states:
"Somebody could run their own identity server that says they're
http://spammer.example.com/000001/ all the way to
http://spammer.example.com/999999/ and that's not a goal of this
system to prevent. It's another layer's job to say the identities with
URL spammer.example.com/* is a spammer, or some ID server is a known
spammer, or some particular identity is a known spammer.

What this does prevent is anybody but that spammer from using that
identity URL. "

well http://www.jkg.in/openid/ proves that anybody can use those
identity URLs, in that case, the FAQ should be updated right?

Pat



More information about the general mailing list