Microid mailing list

["Thomas Huhn" <thomas.huhn AT gmail.com>]

Hi Will,

thanks for clarifying some aspects, but I still have a couple of questions ..

2007/3/14, Will Norris <will AT willnorris.com>:

The beauty of microid is that I set the microid on my page once and
leave it there so that I can use it to verify my ownership of the
page on any number of third party services.  For example, you have a
constant microid on solution-media.de with a value of
"8860d6cf2db6ae58d7488d55faa93446abc20aa7".  If I knew what email
address was used to generate that ID, I could have my OpenID provider
send over that email address for me and I would be able to claim
ownership of that site. 

While you certainly *can* edit the microid
on your site anytime you want, you shouldn't have to go and edit your
site source code every time you want to claim ownership at a new
third-party.

MicroID doesn't specifically say anything about verifying email,
because that is somewhat out of scope.  MicroID is a spec for
designating that a particular principal owns a particular piece of
content.  I can use a known identifier for a person to verify if they
own any particular piece of content which contains a microid.
Someone can claim that they are thomas.huhn AT gmail.com, and I can use
that identifier to verify that "thomas.huhn AT gmail.com" owns a
particular piece of content, but that still doesn't verify that the
person actually *is* "thomas.huhn AT gmail.com".  If you are consuming
microids in this manner, it's a fundamental principal that you need
to verify the identity you are using actually belongs to the user you
are verifying for.  With OpenID this is automatic, but if you're
using email then additional verification is necessary.

Ok, I see. So you would propose to better use OpenID and the URI of the website you claim as your own as the two URIs for the microid? Or are there any other obstacles (besides not having a verified email adress for communication purposes) I´m not aware of at the moment?

(I apologize if my language isn't clear on this... I'm trying to type
this in the middle of a meeting, so I can try explaining better later
if necessary.  

Thanks a lot for spending your time on me, I think I should have better talked to you before implementing this. ;-).

Additionally, I'm going to CC the microid list to see
if someone there can clarify.  Are you on that list?)

Sorry, I´m not, but I´m gonna change this ;-).

-will

-Thomas