[PROPOSAL] Removing SIGNALL From Draft 10

Josh Hoyt josh at janrain.com
Sun Oct 1 02:57:30 UTC 2006


On 9/30/06, Dick Hardt <dick at sxip.com> wrote:
> +1 assuming that we solve the multivalue parameter issue somehow. See:
>         http://openid.net/pipermail/specs/2006-September/000139.html
>
> Agree with security issue. Motivator for it was support for multiple
> parameters of same name.

The primary motivator was actually to support signing values that
don't start with "openid.", since signed-list signatures as written
don't do that.

Josh


More information about the specs mailing list