Comment 48 for bug 1169

A quick update on this topic. Based on the feedback we've received, it's clear that most users don't like the current implementation's 1.1 identity URL. Specifically, they want something easier to remember than https://login.launchpad.net/+id/xxxxxxx for 1.1 RPs. We used this format originally because it helps to maintain anonymity. However many 1.1 RPs do not seem to respect this and publish the URL to the public. Additionally, users want to have an OpenID that they can remember. So, we're working on a proposal for a different method. Currently we're thinking about this format: https://id.launchpad.net/NNN/somename where NNN is a random number. So my URL might be https://id.launchpad.net/911/rinchen and Francis' might be https://id.launchpad.net/201/flacoste.

Because users of Launchpad can change their usernames, using only a username in an identity URL (e.g. https://launchpad.net/~rinchen) is not sustainable. Identity URLs should remain constant to preserve the identity. If we didn't, it's possible for me to change my username from "rinchen" to "joey40" and someone else can then register (or rename) as "rinchen". Thus when they would go to OpenID sites, they could enter their identity URL, which was my old one (e.g. https://launchpad.net/~rinchen) and gain access to my accounts. This is why our current discussions are around having a random number in the 1.1 identity URL. For 2.0 sites, login.launchpad.net would remain the universal URL for everyone.

Joey