Realm spoofing spec patch

Johnny Bufu johnny at sxip.com
Fri May 25 19:20:58 UTC 2007


Josh,

On 24-May-07, at 4:19 PM, Josh Hoyt wrote:

> Please review the additions. If you'd like to see the
> specific changes, you can look at the diffs in revision control[3].

Looks good to me. One minor issue about the wording - we have now two  
"return URL verifications": one done by the OP and a totally  
different one done by the RP. Would it make sense to call this new  
one something different, e.g. "RP endpoint verification" (or  
validation)?


Johnny




More information about the specs mailing list