URL relationship permanence

Xageroth Sekarius xageroth at gmail.com
Thu Jun 30 19:57:55 PDT 2005


On 6/30/05, Martin Atkins <mart at degeneration.co.uk> wrote:
> Xageroth Sekarius wrote:
> > LID gets around this problem by being the server as well and therefore the
> > assertions from the URL endpoint and assertions by the server are the
> > same.
> 
> I don't really see how this helps. If you lose the domain your in,
> someone can still pose as you by running a LID endpoint on their
> newly-aquired domain that happens to be the same as that of a
> pre-existing user. They just need to install LID's CGI script.
> 
> 

woops, you're right. wasn't thinking.


More information about the yadis mailing list