[OpenID] Identity autocomplete
SitG Admin
sysadmin at shadowsinthegarden.com
Fri Aug 28 15:42:53 UTC 2009
>You should be able to say:
>
>"Chris"
>
>And the system responds: "Chris who?"
>
>I'm only partially joking.
Google sometimes guesses what I'm trying to look for and offers
autocomplete suggestions as I'm typing. I dislike this because, as it
reveals, Google is having my keystrokes sent to them in real time.
The privacy concern with a RP is that it would reveal the existence
of other names (commonly associated with Chris, to continue your
example) known to that system. Especially since I wouldn't (at that
time) even be *verified* as having (any claim to) the name Chris
myself, because the system wouldn't be sure *who* I was (but would be
trying to help me figure it out). I could just type in names, whoever
I was after, and hope to find them. I just know their first name? Is
it an especially *uncommon* first name? Oh, good - well, then, let me
see if any popular sites know them by (an account associated with)
their *last* name.
I do think it's a nice feature, but I don't see it going any further
than "Your username is 'factoryjoe' at which site?".
-Shade
More information about the general
mailing list