Re: [OpenID] Announce: OpenID Authentication Draft 12 (finally)

2007-08-29 Thread Johnny Bufu
On 29-Aug-07, at 12:19 AM, Peter Williams wrote: Why do I care so much about a #? Discovery in draft#12 a required security procedure - used when verifying the validity of an Auth Response. I agree: everything starts and then relies on discovery; if it's broken nothing works. It's patched

Re: [OpenID] Announce: OpenID Authentication Draft 12 (finally)

2007-08-28 Thread Rowan Kerr
On 28-Aug-07, at 6:11 PM, Johnny Bufu wrote: On 27-Aug-07, at 7:05 PM, Peter Williams wrote: A. fragment identifiers on user input are to be removed. Do not remove the separator. Good thing we didn't call it final just yet. In my mind the separator was part of the fragment, but re-reading