[OpenID] Google OpenID IDP is now live

Allen Tom atom at yahoo-inc.com
Wed Oct 29 23:16:34 UTC 2008


This could be interesting if the RP passed the user's email address to 
the OP for verification, but that's not how OpenID works today. Right 
now, the Yahoo OP only sees "yahoo.com" without the local user id.

Allen


Steven Livingstone-Perez wrote:
> Yes, and perhaps to labor the point slightly, Yahoo will know the preferred
> language of that users email (identifier).
>
> Would you see this as a major privacy issue were I to enter
> "steven at yahoo.com" and you present my UI in English irrespective of me being
> logged in? Or in my wife's case she enters "stevenswife at yahoo.com" and she
> get's the UI in Spanish?
>
> And we're on holiday in a web café in France.
>
>
> -----Original Message-----
> From: Allen Tom [mailto:atom at yahoo-inc.com] 
> Sent: 29 October 2008 21:37
> To: Martin Atkins; Steven Livingstone-Perez; 'OpenID List'
> Subject: Re: [OpenID] Google OpenID IDP is now live
>
> Yes, the OP identifier "yahoo.com" is not sufficient to determine the 
> user's language, and a lot of our users travel internationally and use 
> internet cafes. This is the primary reason why we'd prefer that the RP 
> pass us a *hint* as to the user's language preference, rather than 
> relying on the HTTP Accept-Language header.
>
> Allen
>
>
> Martin Atkins wrote:
>   
>> Most people use generic email domains like hotmail.com which aren't so 
>> great as a basis for this.  I certainly can't guess where *you're* from 
>> from your email address.
>>
>>   
>>     
>
>
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081029/40d0a1e8/attachment-0002.htm>


More information about the general mailing list