March 20, 2004

Occasionally, I have a really good idea - they call it TypeKey

I note with some pride that SixApart have taken to heart my recommendation that they implement a trusted, cross-site identification system as part of MovableType. They are calling it TypeKey and while they haven't posted details it sounds as if they took my suggestion of using public-key encryption and have built a validation system for MovableType.

I wrote to them about the idea on the date of my post and added the suggestion on a couple of well-known MT-based sites. I wrote it in the very early days of the MT-Flood problem and it seemed that SixApart was still just trying to deal with the problem symptomatically (by blocking either the source IP of the flood comments or limiting the time between comments). I didn't see this as a solution and suggested a cross-site authentication system so that we could screen out spammers.

So I think I may have been the first one to think of this (at least in this context). Until further evidence surfaces, I will assume I was. :>

So there.

Posted by artandscience at March 20, 2004 11:36 PM
Comments

My site is actually run by WordPress, which has a much more robust solution to comment spam.

Posted by: Matt at March 24, 2004 09:41 PM
Implementation of James Seng's security plugin: