< blockquote>"I don't think it breaches privacy" < blockquote> This immediately becomes an issue when someone uses it wrong. It's easy to say services should proxy the image. But some certainly will not and expose email address or other account identifier. Using a secure hash (such as SHA-2) would be a simple change that would improve the privacy greatly. Love the idea of using a well known URL for this purpose!