Re: ORCID - unique identifiers for contributors

Andy Mabbett <andy@pigsonthewing.org.uk> Mon, 16 September 2013 20:38 UTC

Return-Path: <pigsotwing@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57A3911E8324 for <ietf@ietfa.amsl.com>; Mon, 16 Sep 2013 13:38:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.42
X-Spam-Level:
X-Spam-Status: No, score=-1.42 tagged_above=-999 required=5 tests=[AWL=0.558, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ME31we4SIPYn for <ietf@ietfa.amsl.com>; Mon, 16 Sep 2013 13:38:13 -0700 (PDT)
Received: from mail-oa0-x22c.google.com (mail-oa0-x22c.google.com [IPv6:2607:f8b0:4003:c02::22c]) by ietfa.amsl.com (Postfix) with ESMTP id 6DC7511E8321 for <ietf@ietf.org>; Mon, 16 Sep 2013 13:38:13 -0700 (PDT)
Received: by mail-oa0-f44.google.com with SMTP id g12so479163oah.3 for <ietf@ietf.org>; Mon, 16 Sep 2013 13:38:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=w+KJUidY/4+ivQCvrTFjAC9rzwrNOjZBHhyMtAS11+M=; b=ccwX+uXI6FhNMPmclywKkvyy/WKNv/eS9/8jflzoRoy1jaHgJ3uuKML4d/n+vybcIO M+o9mFuLksL0hs+cYLL6bv9PSN0dnrfg0ApGUuCOqWEuJZDxXQ1Nmr463fu/0Bnih0KD jCg5JvD+PL7CdxZpVV6hZVe3Nl3XzrQ/imcoOwC+Zoczq5X9w9YC2sW1tO5bzU5HdaCM Mhihgx7p0Nm3H7iVD+mLgFXrSoOq2LpnT77wb6ROJfFldAb1ayL9qQZyMfsekXKNuJjh Pfi4W5+U66wx3+qf+gnATfNmlmZiF4F59t8xaz0xr6JvOV//doyJaYpHhQ1tTS+VWqtJ TcYg==
X-Received: by 10.182.81.65 with SMTP id y1mr378921obx.89.1379363892965; Mon, 16 Sep 2013 13:38:12 -0700 (PDT)
MIME-Version: 1.0
Sender: pigsotwing@gmail.com
Received: by 10.182.45.6 with HTTP; Mon, 16 Sep 2013 13:37:32 -0700 (PDT)
In-Reply-To: <523764AB.9070809@gmail.com>
References: <CABiXOE=cbpPigRbqCkZYzgKSN+yiG4HyNznF99WohLc_SByi2g@mail.gmail.com> <523764AB.9070809@gmail.com>
From: Andy Mabbett <andy@pigsonthewing.org.uk>
Date: Mon, 16 Sep 2013 21:37:32 +0100
X-Google-Sender-Auth: Y6yn05pO4-jJPkztxliZ6AsMrKA
Message-ID: <CABiXOE=x7-=XjkY4O7eBUUiRO9-+CpzAJ-BzWMCjJX31ZqT09Q@mail.gmail.com>
Subject: Re: ORCID - unique identifiers for contributors
To: ietf@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Sep 2013 20:38:14 -0000

On 16 September 2013 21:06, Brian E Carpenter
<brian.e.carpenter@gmail.com> wrote:
> How do I know that the sender of this message actually has the right
> to claim the ORCID in question (0000-0001-5882-6823)? The web page
> doesn't present anything (such as a public key) that could be used
> for authentication.

It is not the purpose of ORCID to provide authentication.

That said, in my case my ORCID is shown on my website, and my ORCID
profile links to my website, so there is round trip verification.It is
proposed to add "rel-me" [1] attributes to ORCID, to encode that
authentication in a machine-readable manner, when the linked website
(such as mine) also uses that attribute.


[1] http://microformats.org/wiki/rel-me

-- 
Andy Mabbett
@pigsonthewing
http://pigsonthewing.org.uk