[natch]

Authentication mechanisms and they way they are implemented can have bleedover into the ability of a user to maintain control of their anonymity and privacy.

Has there been any writeup that explains the potential impact of Persona on privacy? Not just the impact when used as intended, but also any unintended effects?

[Flimm]

There's an hour long video discussing the measures taken to protect the user's privacy, given by Ben Adida, one of the developers. It's 12 months old, but I believe the protocol hasn't changed enough to make the information out of date.

https://www.youtube.com/watch?v=QDSh3osE4GQ

Also, see this blog post:

http://identity.mozilla.com/post/7899984443/privacy-and-brow...

[callahad]

I'm not aware of any standalone articles, but something of that nature would be really fantastic. Such an article would probably be best if written by someone outside of the Persona team.

[ygjb]

Just a further comment, anyone interested in writing such an analysis or document should contact us with any questions!