-
-
Notifications
You must be signed in to change notification settings - Fork 208
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Associate accounts with websites #1034
Comments
I thought we already had an issue for this but I can't find it, I guess I was thinking of gratipay/gratipay.com#2477. |
Note: there is a standard protocol for verifying domain ownership now, the one used by Let's Encrypt. |
Remember to keep an eye out for these verification flaws when implementing this: https://edoverflow.com/2018/logic-flaws-in-wot-services. ;) |
We should implement the same mechanism as Mastodon: looking in the target page for a |
Once a website has been verified and attached to an account, the matching username should be assigned to that account. For example if the liberapay.com domain is added to the Liberapay team, then https://liberapay.com/liberapay.com/ should automatically become an alias of and redirect to https://liberapay.com/Liberapay/. We need #1712 for that. |
(Only bumping here because) I'd very like to have the possibility to associate an account with a website. |
rel="me" backlinks are the standard way to confirm site ownership |
That'd be great if |
Hello, @jorgesumle and @Changaco I would like to Contribute My first Open Source Contribution. If there is something I could help you out with or fix some issues Please do ping me. |
Right now people can prove that they are who they are by linking some social networks. However, we cannot do that with websites.
I'm thinking about implementing a validation mechanism (like uploading a file to the root of the server and making Liberapay check for it), so that people cannot impersonate teams or individuals by claiming the ownership of websites. Using this feature we could link the Liberapay account with liberapay.com, and projects or bloggers could link their accounts with their websites.
What do you think? Can we do also something for people who don't have access to the server root, like people who use noblogs.org or wordpress.com?
The text was updated successfully, but these errors were encountered: