Recordon, David wrote:
> We thus believe that any state tracking needed by a stateless RP must be 
> maintained as GET parameters within the return_to argument.  In the case 
> of a stateful RP, it can either do the same thing, or store state via 
> other means such as using a session id within a cookie to reference 
> database data.

Sounds good to me.

specs mailing list

Reply via email to