>> Can't you then produce hundreds of IDs, all delegating to the same >> identity? > > Yes.
But then, users can easily create as many fake accounts as they want to. This is not something I want to happen (it's still possible to setup fake accounts, but it should be more difficult for the average script kiddy). > If the provider dictates the identity, as you keep insisting, that sentence > makes no sense whatsoever. The value entered as the identifier is the > identifier you should use. Otherwise, what's the point of delegation at all? It may help users to remember their openid more easily, and always fill in the same text into the login box. Regards, Martin _______________________________________________ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailman/listinfo/python-dev Unsubscribe: http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com
