On 10/16/06, Marius Scurtescu <[EMAIL PROTECTED]> wrote: > > Just so that there is an obvious one way to do it, so that it's easier > > to get right, if I understand David's motivation. It's also easier to > > make clear in the spec. > > If ordering is not important then you are guaranteed to get it right.
But ordering *is* important whether a specific order is prescribed or not. The same ordering has to be used when the signature is generated and when it is checked. > The spec could recommend alphabetical ordering, but I don't see the > need for a must. If it's not a MUST, then it doesn't clarify or simplify the procedure, because it could still be any order. Again, I don't care very much about making this change. Unless David stands up for it, I'm going to drop it. Josh _______________________________________________ specs mailing list specs@openid.net http://openid.net/mailman/listinfo/specs
