<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Peter,</div><div><br></div><div>There's no need to assume malicious action on the part of the OP here, because there are other issues with stale data. As two examples, RP's encounter multiple identities for users with no obvious way to tell which is the right one, which results in difficulties picking the right user in a variety of contexts and identity reconciliation problems, and an old account can be incorrectly associated with a new user(why fragments are included in the specification and some implementations). It's nice to keep identity databases clean.</div><div><br></div><div>After all, isn't a "single digital identity" one of OpenID's goals, written in bright orange letters on the front page? :D</div><div>Nate.</div><div><br></div><div><div>On 30 May 2008, at 21:12, Peter Williams wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Why does one really need to de-register in openid - a law#1 mandatory consent policy context? The assumption is that you have several op provisioned with your attributes - and I all cases you choose which one to allow to release your data. If they are not abiding by law1, they cannot be presumed to deregister you either.</font></p> </blockquote></div><br></body></html>