I'm not asking about associating Stack* accounts with one another.
If I have a 3rd party website and I want my users to be able to link to their StackExchange/StackOverflow user accounts, but I don't want users to be able to link to accounts that aren't theirs, what is the best way to achieve this? That is, how can I confirm that a given user on my website really does correspond with a given Stack* user?
Some options I've considered:
- User's display name must match (not very secure, but something)
- Ask user to update their profile with some random token string, similar to how Google Analytics asks for a CName record or file on a website
- Use OpenId and have the user log into my website using their SO OpenId
What's the simplest, best option? I'd like to be able to give the user some kind of rewards specific to activities they do on StackOverflow that I value (separate from SO badges), but I don't want users to be able to cheat by associating with somebody else's SO account. Hence, the goal of validating the account is actually theirs.
Thanks for your help!