Eliot Lear wrote:
Hi Brian,
Apologies for the belated review. Please see comments below.
On 7/22/64 8:33 PM, Brian E Carpenter wrote:
Please see attached review.
[...]
"some sort of..." "any number of ways" This is very loose language
for a standards-track draft. I don't know what to suggest but it
just seems too vague as it is. If all you can actually specify is
a transport mechanism, then shouldn't the specification avoid hand-waving
on other matters?
The issue is that OpenID was designed where you could serialize with
cookies. You can't do that with a non-browser app in the middle.
Still, the matter is internal to the RP. There is no need for the
information to be interpreted by other parties, and as such we ought not
specify its form. If you would like I can add some text around this
since it seems to be a point of confusion.
IMHO, I think some text in this area would be helpful.
_______________________________________________
Gen-art mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/gen-art
