[OpenID] question: use of PAPE information by RPs

[Johannes Ernst]

A question for the PAPE implementors among Relying Parties ...

So the OP sends you some PAPE information ... what do you actually do with it?

For example, are you denying login if the OP's authentication was not strong enough for your requirements? Or do you let users in regardless?

Thanks,


Johannes.



Johannes Ernst
NetMesh Inc.