I realized after writing this that you meant that people’s email addresses are private but their scores are public if you know their email. I’d default to not exposing people’s participation and scores unless they expected that to happen, but maybe that’s less of an issue than I was thinking. The predictability of LessWrong emails still would expose a lot of email addresses.
I’d still recommend the random ID solution though since it’s trivial to reason about (it’s basically a one-time-pad).
I realized after writing this that you meant that people’s email addresses are private but their scores are public if you know their email. I’d default to not exposing people’s participation and scores unless they expected that to happen, but maybe that’s less of an issue than I was thinking. The predictability of LessWrong emails still would expose a lot of email addresses.
I’d still recommend the random ID solution though since it’s trivial to reason about (it’s basically a one-time-pad).