[OpenID] Multiple Domains and State

[Nate Klingenstein]

Peter,

You're right.  I'd naturally assumed it to be part of the response(as  
a wildcarded return_to), because there's no real meat to putting it  
only in the request, which is never signed in the first place.   
However, the return_to must be the return_to in the request, e.g. not  
wildcarded.

Okay, now I'm baffled.
Nate.

On 25 Apr 2008, at 01:56, Peter Williams wrote:

> - realm provides scope to a request, explicitely. No mention is  
> made of scoped responses.