<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Paul,</div><div><br class="webkit-block-placeholder"></div><div>I can appreciate the pseudonyms and the use of directed identity, but how does this enhance the privacy of users, if it's really just an appended string? Isn't it trivially more difficult to correlate by simply truncating the URL? Maybe I'm misinterpreting something, but if an RP turned rogue, I don't think that #abc123 would be much to overcome.</div><div><br></div><div>Thanks,</div><div>Nate.</div><div><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><span class="Apple-style-span" style="-webkit-text-stroke-width: -1; "></span></p></blockquote><br><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><span class="Apple-style-span" style="-webkit-text-stroke-width: -1; ">1) the opaque characters you are seeing in the Yahoo OpenIDs support </span></p></blockquote><blockquote type="cite"> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">enhanced privacy (by inhibiting correlation), its a feature called<span class="Apple-converted-space"> </span></font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">'directed identity'</font></p> <blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 10.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 10.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Yahoo! (and Flickr) - we've got it working,<span class="Apple-converted-space"> </span>it would have been a snap<span class="Apple-converted-space"> </span></font></p> <p style="margin: 0.0px 0.0px 0.0px 10.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">except that Yahoo! is appending an alpha numeric string to the end of<span class="Apple-converted-space"> </span></font></p> <p style="margin: 0.0px 0.0px 0.0px 10.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">the identity URL.<span class="Apple-converted-space"> </span>We cannot find documentation detailing the purpose<span class="Apple-converted-space"> </span></font></p> <p style="margin: 0.0px 0.0px 0.0px 10.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">of that string.</font></p> </blockquote></blockquote></div><br></body></html>