On both sites, if you haven't validated your email address you're treated as an anonymous user. Which means that people can give you access to their private posts, but you can't comment there if they've disabled anonymous comments.
Worse, even if you've got a validated email and you've commented there before, if they've disabled anonymous comments you can't log in from the comment form, whereas a user with an account can. That's really bad from an end user perspective.
I think one concern here is spam.
It's exceedingly easy to set up an open OpenID server with a mailserver and use it to get validated OpenIDs that could then be used to spam. Whilelisting domains won't work, either--if it wasn't so dreadfully easy to set up zombie LJs this page wouldn't be half spam.
This might be something that gets fixed after we have better spam solutions--we actually have a guy who has contacted us, interested in working on that.
We might need to have a way to validate OpenID users beyond the email. Like first comments go into a queue that's approved by our spam team, or something.
(Regular disclaimer, I'm not official, yada yada.)
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
momijizukamori
no subject
Date: 2009-May-05, Tuesday 22:01 (UTC)Worse, even if you've got a validated email and you've commented there before, if they've disabled anonymous comments you can't log in from the comment form, whereas a user with an account can. That's really bad from an end user perspective.
I think one concern here is spam.
It's exceedingly easy to set up an open OpenID server with a mailserver and use it to get validated OpenIDs that could then be used to spam. Whilelisting domains won't work, either--if it wasn't so dreadfully easy to set up zombie LJs this page wouldn't be half spam.
This might be something that gets fixed after we have better spam solutions--we actually have a guy who has contacted us, interested in working on that.
We might need to have a way to validate OpenID users beyond the email. Like first comments go into a queue that's approved by our spam team, or something.
(Regular disclaimer, I'm not official, yada yada.)