OpenID Hybrid v2 Proposal (formerly known OpenID Connect)

SitG Admin sysadmin at shadowsinthegarden.com
Thu May 27 00:26:13 UTC 2010


>Users who want to use their Flickr Photostream url as an OpenID are "forced"
>to pick a vanity Flickr URL.

So there's nothing to stop them from picking a vanity Flickr URL that 
is indistinguishable from a machine-generated, "not for human 
consumption" URL?

We say "human readable" but I think what it means is "CAN be human 
readable", in the technical sense that it is not prevented outright. 
There is still no assurance, even before mixing different languages 
into this, that other humans will find it to be "readable".

They do (as you said) reference content, but whether they are "human 
readable" is up to the human users involved (that user to try for it, 
and other users to understand it). The content could be linked to 
anyway; users aren't copying that URL from the encoded strings that 
appear in their address bar during the OpenID dance.

Correlation seems somehow linked to identity, for "individual users" 
instead of "a member of this site who has thus (implicitly) agreed to 
these terms", anyway. I shall think upon this further.

-Shade


More information about the specs mailing list