Skip to Content.
Sympa Menu

microid - Re: [Microid] MicroID hashing algorithm(s) and normalization

microid AT lists.ibiblio.org

Subject: Microid mailing list

List archive

Chronological Thread  
  • From: "Yaniv Golan" <yaniv AT yedda.com>
  • To: <microid AT lists.ibiblio.org>
  • Subject: Re: [Microid] MicroID hashing algorithm(s) and normalization
  • Date: Wed, 29 Nov 2006 10:02:16 +0200

> Personally I don't see a big difference here between HMAC and SHA1
> here because we're not attempting to provide cryptographic
> assurance.
> I think we need to settle on one algorithm and leave it at that.
> Fewer options, fewer ways to go wrong.
>
> Peter
>
> --
> Peter Saint-Andre
> Jabber Software Foundation
> http://www.jabber.org/people/stpeter.shtml

Fewer options are good, but it's also good to indicate which option
you're using, just in case you'd like to change your mind later.

So, my microid for my Yedda profile page:

http://yedda.com/people/9512186217351/

which right now is:

<meta name="microid"
content="e5de55ef248b5f8b06d38253cac0ae725d6455fb" />

Would change to

<meta name="microid"
content="sh1:e5de55ef248b5f8b06d38253cac0ae725d6455fb" />

Small change, but it allows future revisions of the spec to support
legacy support. To rephrase the old saying, "better metadata than
sorry" :)

In fact, given the introduction of OpenID into the discussion, I think
that it would make sense to load the content with additional metadata,
such as the element used as the verification anchor:

In the case of email:

<meta name="microid"
content="sh1:email:e5de55ef248b5f8b06d38253cac0ae725d6455fb" />

In the case the OpenID identity is used instead of email:

<meta name="microid"
content="sh1:openid:e5de55ef248b5f8b06d38253cac0ae725d6455fb"/>


Yaniv

--
Yaniv Golan
My profile on Yedda: http://yedda.com/people/9512186217351/





Archive powered by MHonArc 2.6.24.

Top of Page