Skip to main content

This is tricky, as the bidirectional rel="me" is the real confirmation of assertions; you're still implicitly trusting the one-way assertion of verification here. Also, as used now, "verified" tends to be an assertion made about the current page's connection to a supposedly famous human, not another page (see Twitter, Google+ use of Verified badges). OpenID Connect has a 'vefified' boolean with this semantic too (I'm not necessarily defending this practice, just noting folk terminology here).

Are you coming to IIW this week? chaining of Authentication in this way seems like an important topic to talk about there.

Kevin Marks, Oct 17 2011 on 1500wordmtu.com