[OpenID] Yahoo hijacking?

SitG Admin sysadmin at shadowsinthegarden.com
Sat Apr 19 03:09:18 UTC 2008


>1) The user does NOT want to sign into the site specified by the return_to

Scenario:

I'm a user with multiple Identities, compartmentalizing my life. My 
fingers type in the Identity that I'm accustomed to using, but then I 
realize that this would actually be improper for some reason, and I 
decide cancel so I can go back and enter in a *different* Identity to 
be associated with the comment I'm leaving . . .

  . . . and then the OP redirects me to a completely unrelated page, 
causing me to lose the comment I just typed up. Oops!

-Shade



More information about the general mailing list