Oops. Sorry. Wrong host. Well, but the user already got redirected there so the 
incremental risk is small I think.

On Jan 13, 2010, at 16:35, SitG Admin wrote:

> If the OP knows it, yes. I thought you were suggesting that the OP would be 
> able to send back a custom "for more information" error URL for the user to 
> investigate further.
> 
> -Shade
> 
> At 2:49 PM -0800 1/13/10, Johannes Ernst wrote:
>> I thought that this URL would point to the RP's support site i.e. within the 
>> same domain.
>> 
>> On Jan 13, 2010, at 14:41, SitG Admin wrote:
>> 
>>>> 3. Include a URL, to be given to the user, which points to (unspecified) 
>>>> information on how to solve the problem.  Could be help page, tech support 
>>>> line, ... up to the implementor.
>>> 
>>> "Visit this URL to help solve your problem [and give us another chance to 
>>> infect your browser with malware]."
>>> 
>>> There will be the usual warnings about this URL, as (in some cases) with 
>>> *all* 3rd-party URL's, I trust?
>>> 
>>> -Shade
> 

_______________________________________________
specs mailing list
[email protected]
http://lists.openid.net/mailman/listinfo/openid-specs

Reply via email to