[OpenID] Supporting OpenID

Nate Klingenstein ndk at internet2.edu
Fri Apr 11 21:06:55 UTC 2008


Paul,

Your understanding would make a lot of sense, squares with my  
intuition, and it'd be nice if it were true.  It doesn't seem to be  
true, though, from my testing.  Instead, this only gives a (risky)  
illusion of pseudonymity and impacts usability as well.

Take care,
Nate.

On 11 Apr 2008, at 21:02, Paul Madsen wrote:

> ) user provides 'yahoo.com' to RP
> 2) OP gives a randomized (and targetted) identifier to the RP
>
> I wouldn't expect that a user would normally be presenting the  
> random URI, not sure why Yahoo displays it for the user other than  
> perhaps to allow them to talk about the different privacy  
> characteristics it affords?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080411/759c0e15/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2417 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080411/759c0e15/attachment-0002.bin>


More information about the general mailing list