[cap-talk] Firefox breaks the principle of identifiability

[David Hopwood]

Ian G wrote:
> Jed Donnelley wrote:
> 
>> Forget the tedious typing.  You give them your smart card (or 
>> something like) and they add a Petname binding to it.
> 
> This isn't a petname.  At least as far as I
> know a petname must be chosen and set
> by the owner.  If it is suggested by some
> other agency, it is a nickname.  Now, if
> your model is that they give you a nickname
> and you then elect that as a petname, that
> would be ok.

Also note that the system may display a suggested nickname, but
the user has to type it in again if that's the pet name they want.
If the nickname is put into the pet name field by default, then
we have the same kind of similar character spoofing issues that
started this thread.

-- 
David Hopwood <david.nospam.hopwood at blueyonder.co.uk>