The URI generated for my Gravatar link contains an unique identifier. As this is not the MD5 of my email, what is it?
If the MD5 uses somebody else's email, how can I retrieve that? If something else instead of MD5 is used to create it, what?
My (all-lowercase) email (which has a different MD5, according to my MD5 generator and this site) is visible in my profile settings. It has not been changed, and is provided via social media.
The suggestion given in this question is not helpful - following the suggestion does not change the matter.
The explanation given on that site may or may not be relevant, but anyway the token does not change with changed IP.
BTW: I am not primarily interested in using gravatar pictures. I am doing security investigation about those recognizeable strings and need to know from what they are generated and what information they can spill.
Addendum: As people seem to not know how Gravatar is supposed to function, an explanation:
Any website that knows the email addresses of their users can retrieve avatars stored at Gravatar. This is achieved by creating an MD5 hash from the respective email address and hot-linking an image with this MD5 hash from Gravatar. In case the user has an avatar stored at Gravatar with the same email address, Gravatar knows the MD5 and will deliver that image.
In any case, no matter if something is stored at Gravatar or not, the MD5 will be created by the local site and will be publicly included in the webpage. This imposes a security risk: by this MD5 a user can be re-identified on different websites, even if the email itself is not published on these websites.
In my case, Stack Overflow creates this MD5 for my account, but it is not the one belonging to my email address as stored in the profile. Therefore, I probably cannot control it by changing my email address, and I do not know what kind of personal data may be contained in it.