On Mon, Sep 20, 2010 at 4:21 PM, MJ Ray <[log in to unmask]> wrote:

> I think FOSS servers would be affected by the published-key spoofing
> flaw too, wouldn't they?

They would, but it should be easy(-ish) for each server admin to get
their own key, which it can then (hopefully!) keep secret. The real
problem is getting end-users to generate, enter, and register a
consumer key.

Really really, though, just treat the consumer key as a user-agent
string. Don't take it seriously. You are free to not make the same
mistakes as Twitter; your needs are different.

Cheers,
-Nate