Anyone can register for an ORCID id under any name. Authenticating with ORCID is evidence that you are the person who registered that id, but not that you really are accurately named in the ORCID record. This is OK for some purposes, but it also allows some attacks, e.g. reputational ones. It would be useful if there was an optional second step to registration, in which a trusted institution can validate the ORCID record. Many services would rightly continue to accept unvalidated ORCID identities, but for some purposes traceability to the legal and physical person is essential.
Please sign in to leave a comment.