Launchpad itself

  1. Bug #199069
  2. Comment #3

Comment 3 for bug 199069

Revision history for this message
Stuart Bishop (stub) wrote : Re: [Bug 199069] Re: User profile pages should not be OpenID identities

Francis J. Lacoste wrote:

> Because Launchpad account identities are mutable. So if I desactivate or
> rename my account, somebody could rename their LP account to my old name
> and log in using OpenID under my identity in a third party OpenID site.

Yes. People can shoot themselves in the foot. So don't do that. Most of the
big providers recycle ids and have this edge case, and the problem has been
around in similar forms since bulletin boards and in reality not really an
issue.

--
Stuart Bishop <email address hidden> http://www.canonical.com/
Canonical Ltd. http://www.ubuntu.com/