[OpenID] Yahoo hijacking?
SitG Admin
sysadmin at shadowsinthegarden.com
Sat Apr 19 03:09:18 UTC 2008
>1) The user does NOT want to sign into the site specified by the return_to
Scenario:
I'm a user with multiple Identities, compartmentalizing my life. My
fingers type in the Identity that I'm accustomed to using, but then I
realize that this would actually be improper for some reason, and I
decide cancel so I can go back and enter in a *different* Identity to
be associated with the comment I'm leaving . . .
. . . and then the OP redirects me to a completely unrelated page,
causing me to lose the comment I just typed up. Oops!
-Shade
More information about the general
mailing list