[Openid-specs-ab] jku and x5u

[Tim Bray]

Almost certainly I’m just missing something obvious, but I’m having trouble
understanding why the jku and x5u header claims exist.  The idea is I get a
message and believe the message’s assertion about where I should go to get
the cert to validate the message?  -T
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20130402/f966733e/attachment.html>