Comments on Auth 2.0 - Pre-Draft 11

[Johnny Bufu]

On 12-Dec-06, at 11:31 AM, Joaquin Miller wrote:
>> When a message is sent as a POST, OpenID parameters MUST only be  
>> sent in and processed from the POST body.
>
> Does that mean the same as this:
>
>    When a message is sent as a POST, OpenID parameters MUST be sent  
> only in the POST body; the parameters processed MUST be only those  
> from the POST body.

The second part of your text should say "OpenID parameters" to be  
equivalent. Also, one could argue that it's not clear if the first  
part ("when a message is sent as a POST") also applies to the second  
statement, the one after the ";".

> If so, is the latter better?

Given the above, I favor the text I came up with yesterday.


Thanks,
Johnny