[security] security

[Dan Lyke]

On Sat, 28 Oct 2006 23:35:39 -0600, James A. Donald wrote:
> Presumably we want to assign a reputation both on the
> basis of the individual and of the identity provider, so
> not "completely independent".

I may indeed use a regex as part of my reputation management code, but  
I want the underlying technologies to support complete independence.

In fact, my utopia involves a world where every individual is their  
own identity provider. It's great if you want to use your LiveJournal  
account if that'll make life easier for you, but I've seen way too  
many problems with tying my identifiers to third parties to think that  
any additional layers in that path is a good idea. Having to negotiate  
with the world for a domain name is perhaps a necessary evil, but even  
that's more layers than I'd like.

> "Open" should mean that multiple people can perform the
> role that Google performs.

Open should mean that *anyone* can perform the role that Google  
performs.

Building other systems to deal with that is our challenge.

Dan