We should switch to using the "unauthenticated orcid" icon

[kmccurley]

At some point the ORCID organization started recommending a different ICON for unauthenticated ORCID. In order for us to use the authentication flow of ORCID, we would have to notify all authors with an orcid for them to login to our website and authenticate themselves. They have an OAUTH2 flow that we could implement, and we could send an email to authors for whom an email was supplied, but some authors would simply decline to authenticate themselves (yet another password to remember). In the end we'd have to keep track of which ORCID was authenticated and switch the icon depending on whether that author had authenticated themselves. It's just simpler and less annoying to authors if we go with the unauthenticated icon.

I should mention that at least one author submitted a paper with an incorrect ORCID because they copied the ORCID for Adi Shamir from the template. There is always the possibility of bad data, but I suspect that failure mode will be less common than authors who can no longer authenticate their ORCID because their email address changed.

[kmccurley]

I thought a bit more about this and as usual, "it's complicated". If an author adds their own ORCID to the LaTeX source, you might think of this as "authenticated" but that doesn't fulfill the definition of ORCID. They apparently expect the author to have supplied their ORCID connection with a login via OAUTH2. While it might be possible to have the authors all login to authenticate their ORCIDs, it seems clumsy to me. We could provide that on publish.iacr.org and then keep a record that the author has authenticated their ORCID. We could then insert into the .iacrmetadata file something to signify that an ORCID in the article was authenticated, and then display it differently. I think our best bet is to switch to the unauthenticated icon and allow a way for the \maketitle implementations in metacapture.sty to show the authenticated icon in the future should anyone choose to develop a workflow like that.

OJS has a workflow that now requires ORCIDs to be authenticated, but I suspect the outcome will result in fewer ORCIDs being used. We have never reported ORCIDs for ToSC or TCHES.

The ORCID recommendations say that the unauthenticated ORCID logo should only be displayed with the word "unauthenticated", but that's pretty ugly. I have never seen any publisher use it. Crossref accepts both authenticated and unauthenticated ORCID.

[kmccurley]

There is a simple tikz for showing the unauthenticated ORCID icon. This was created from the SVG official version.

\definecolor{c7faa26}{RGB}{127,170,38}                                                                                                                                                                                            
\def\orcidscale{1}                                                                                                                                                                                                                
\begin{tikzpicture}[y=1em, x=1em, yscale=\orcidscale,xscale=\orcidscale,every node/.append style={scale=\orcidscale}, inner sep=0pt, outer sep=0pt]                                                                  
%  \draw[color=c7faa26, line width=.035cm](.4,.42) circle (.38);                                                                                                                                                                  
  \fill[c7faa26,even odd rule] (.42,.42) circle (.38) (.42,.42) circle (.46);                                                                                                                                                     
  \path[fill=c7faa26,even odd rule] (0.4821, 0.5563) -- (0.3618, 0.5563) -- (0.3618, 0.2494) -- (0.4827, 0.2494).. controls (0.5832, 0.2494) and (0.6449, 0.324) .. (0.6449, 0.4029).. controls (0.6449, 0.439) and (0.6325, 0.4774) .. (0.6058, 0.5067).. controls (0.579, 0.5362) and (0.5382, 0.5563) .. (0.4821, 0.5563) -- cycle(0.4774, 0.2988) -- (0.4153, 0.2988) -- (0.4153, 0.5069) -- (0.4752, 0.5069).. controls (0.5154, 0.5069) and (0.5441, 0.4947) .. (0.5626, 0.476).. controls (0.5812, 0.4573) and (0.5903, 0.4314) .. (0.5903, 0.4029).. controls (0.5903, 0.3856) and (0.585, 0.3595) .. (0.5683, 0.3378).. controls (0.5519, 0.3164) and (0.524, 0.2988) .. (0.4774, 0.2988) -- cycle(0.4752, 0.5124).. controls (0.558, 0.5124) and (0.5958, 0.4622) .. (0.5958, 0.4029).. controls (0.5958, 0.4622) and (0.558, 0.5124) .. (0.4752, 0.5124) -- (0.4098, 0.5124) -- (0.4752, 0.5124) -- cycle(0.6394, 0.4062) -- (0.6394, 0.4029).. controls (0.6394, 0.327) and (0.5801, 0.255) .. (0.4827, 0.255) -- (0.3673, 0.255) -- (0.3673, 0.5508) -- (0.3673, 0.255) -- (0.4827, 0.255).. controls (0.5801, 0.255) and (0.6394, 0.327) .. (0.6394, 0.4029) -- (0.6394, 0.4062) -- cycle(0.2514, 0.5555) -- (0.2514, 0.2489) -- (0.3049, 0.2489) -- (0.3049, 0.5555) -- (0.2514, 0.5555) -- cycle(0.2994, 0.55) -- (0.2994, 0.2544) -- (0.2994, 0.55) -- (0.2569, 0.55) -- (0.2994, 0.55) -- cycle(0.2781, 0.5781).. controls (0.2967, 0.5781) and (0.3115, 0.5933) .. (0.3115, 0.6115).. controls (0.3115, 0.6297) and (0.2967, 0.6449) .. (0.2781, 0.6449).. controls (0.2596, 0.6449) and (0.2447, 0.63) .. (0.2447, 0.6115).. controls (0.2447, 0.5933) and (0.2596, 0.5781) .. (0.2781, 0.5781) -- cycle;                                                                                                                                            
\end{tikzpicture}

[kmccurley]

I'm wondering if we should simply omit the ORCID links in the PDFs for IACR journals. We have no plans to authenticate ORCID in our workflow, and many authors don't update their ORCID profiles anyway so they don't add much value to the PDF other than a dead end link. Having a link to an empty profile can be a disincentive for people to supply their ORCID. If an author keeps their ORCID profile up to date and wants to link to it then they can always use the onclick attribute for this (it would then get a generic external link icon). This would completely avoid the problem of complying with the annoying advice from ORCID about how to display their logo. We could just use the external link icon. It's noteworthy that while ACM is now requiring ORCID, they still don't display the links in their conference proceedings.

For the metacapture package, I think we can just include both the authenticated and unauthenticated icons in case any journals want to use them. It will be up to them to comply with the ORCID requirements in their \maketitle implementation.

[kmccurley]

Correction: ToSC and TCHES are reporting ORCIDs as unauthenticated. That will probably end when they update to version 3.5.