<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Paul,<div><br></div><div>Your understanding would make a lot of sense, squares with my intuition, and it'd be nice if it were true. It doesn't seem to be true, though, from my testing. Instead, this only gives a (risky) illusion of pseudonymity and impacts usability as well.</div><div><br class="webkit-block-placeholder"></div><div>Take care,</div><div>Nate.</div><div><br><div><div>On 11 Apr 2008, at 21:02, Paul Madsen wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">) user provides 'yahoo.com' to RP</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">2) OP gives a randomized (and targetted) identifier to the RP</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">I wouldn't expect that a user would normally be presenting the random URI, not sure why Yahoo displays it for the user other than perhaps to allow them to talk about the different privacy characteristics it affords?</font></p> </blockquote></div><br></div></body></html>