[19:42:07] <tgr>	 if you have too much free time, I'd appreciate thoughts on The external identity provider (or someone with access to their internal data) trying to find out what their users' Wikimedia accounts are. The login process does not directly divulge any information to the identity provider; there are two indirect channels which need to be considered, referrers (which can tell what article the user was reading before clicking login) and correlating the timing to the
[19:42:40] <tgr>	 duh, too many clipboards
[19:42:53] <tgr>	 ...on https://www.mediawiki.org/wiki/User:Tgr_(WMF)/external_login
[21:02:08] <legoktm>	 anomie: I think I fixed the response thing on https://gerrit.wikimedia.org/r/307913 by saying XML is a string...is that good enough?
[23:17:31] <legoktm>	 tgr|away: I left a note on the talk page and edited it as well