Re: Accidental and intentional atom:id collisions (was Re: Consensus call on last raft of issues)

[Bill de hÓra <bill@xxxxxxxxxx>]

Antone Roundy wrote:

> This is already bad enough.  Now how about if the phishing feed claims 
> that it's atom:id is http://a.com/feeda.  Worse still.  With the current 
> spec text, an Atom consumer that does a little extra work, somehow 
> figures out that the phishing version of the entry is not the same as 
> the legitimate version, and tells the user that would be violating the 
> spec.

I don't think this (spam, phishing) is solvable without widespread 
adoption of dsig/pki technology. More snarkily, all the people who 
complain about these things ought to consider using appropriate 
technology. We do need to make sure that Atom entries are easily signed 
tho'.

cheers
Bill