MicroID broken

Chris Erway, one of my friends and colleagues, one day approached me and said there’s this MicroID thing which reveals users’ email addresses on some web sites (which at one point included Digg and Last.fm). He has written a nice article about how MicroID is harmful to users’ privacy here:

http://www.cs.brown.edu/~cce/microid/

Have a look at it. It’s sad to see that such things can even become an IETF draft. Luckily, due to his pressure, most of those sites stopped integrating MicroID. Thanks!