[OpenID] Identity autocomplete

SitG Admin sysadmin at shadowsinthegarden.com
Fri Aug 28 15:42:53 UTC 2009


>You should be able to say:
>
>"Chris"
>
>And the system responds: "Chris who?"
>
>I'm only partially joking.

Google sometimes guesses what I'm trying to look for and offers 
autocomplete suggestions as I'm typing. I dislike this because, as it 
reveals, Google is having my keystrokes sent to them in real time. 
The privacy concern with a RP is that it would reveal the existence 
of other names (commonly associated with Chris, to continue your 
example) known to that system. Especially since I wouldn't (at that 
time) even be *verified* as having (any claim to) the name Chris 
myself, because the system wouldn't be sure *who* I was (but would be 
trying to help me figure it out). I could just type in names, whoever 
I was after, and hope to find them. I just know their first name? Is 
it an especially *uncommon* first name? Oh, good - well, then, let me 
see if any popular sites know them by (an account associated with) 
their *last* name.

I do think it's a nice feature, but I don't see it going any further 
than "Your username is 'factoryjoe' at which site?".

-Shade


More information about the general mailing list