LJ - Purging Accounts = Even More Broken OpenID
2010-Jul-21, Wednesday 12:49![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
thorfinn
Hello, especially to anyone reading me who is on LiveJournal. LJ have recently started purging accounts that are idle inactive/suspended (Edited for accuracy).
This means that those account names can be claimed by people other than the original owner. (ETA: This has already been the case since 2005 with deleted accounts and renames, apparently, but I failed to notice that.)
Unfortunately, this fundamentally breaks the trust relationship of OpenID - which is based around the URL of the logging in site. Essentially, I cannot trust that the OpenID user http://thorfinn.livejournal.com/ will remain to be the original user, without continuously checking that that is so. I can't do that for more than a few users, so essentially, my only effective solution is to be unable to trust any OpenID from livejournal.com.
So, because I cannot trust OpenIDs from livejournal.com, I cannot allow those OpenIDs to access my DW content. This means if you are on LJ, you will be unable to see my locked posts on DW, even if you log in using OpenID.
Most of you will get to read the post anyway, because I will keep cross-posting to LJ, but as I will not be allowing comments on LJ, there will be no commenting.
In short, I'm sorry for the inconvenience, but due to the lack of security of LJ OpenID introduced made even worse by this new policy, I can't allow LJ OpenIDs access to Dreamwidth directly.
If you wish to discuss anything in my locked posts, then come to Dreamwidth. For further references, see:
(no subject)
Date: 2010-07-30 02:23 (UTC)Cheers!
(no subject)
Date: 2010-07-30 02:59 (UTC)there may or may not be LJ OpenIDs in there - I think I have them because I told the importer to import my friends list stuff.