Re: [Flickr APIs] new authentication api

Cal Henderson <cal-YBANsMgXN/7QT0dZR+AlfA@xxxxxxxxxxxxxxxx> wrote:
> [...] *every user* must seperately choose to allow 
> to be authenticated against *every api key* using
> *every return url*. this shifts the responsibility
> of choosing what to authenticate against to the user.
> [...] to avoid [having to auth every return url], with
> each auth call, an application can send along a
> mask of possible return urls that it will use. [...]
> 
> does that make any sense?

My only concern is that it is conveyed clearly to the user what it is
he/she is authorizing.

/P.