Hi,

I wonder if this paragraph has some special background:

  If the client’s response is invalid for any reason or does not
  provide the server with appropriate information to validate the
  challenge, then the server MUST return an HTTP error. On receiving
  such an error, the client SHOULD undo any actions that have been
  taken to fulfill the challenge, e.g., removing files that have been
  provisioned to a web server.

Is there a reason that undoing challenge fulfilling actions, isn't
mentioned for authorizations becoming final (valid or invalid) at all?
Why is this "rare" case of failing responses the only one covered?

Best,
Sophie

_______________________________________________
Acme mailing list
Acme@ietf.org
https://www.ietf.org/mailman/listinfo/acme

Reply via email to