[Openid-specs-ab] Default OpenID Request Object signing algorithm

Roland Hedberg roland.hedberg at adm.umu.se
Sat Jan 26 17:12:25 UTC 2013


Hi,

in the change log for the discovery document under -09 it says:

- Changed default OpenID Request Object signing algorithm to RS256, per issue #571

In no later version changes is this default mention, still it's absent from the document.
It just says: "Servers SHOULD support none and RS256."

So, how should it be; should there be a default.

-- Roland
------------------------------------------------------
Roland Hedberg
IT Architect/Senior Researcher
ICT Services and System Development (ITS) 
Umeå University 
SE-901 87 Umeå, Sweden	
Phone +46 90 786 68 44
Mobile +46 70 696 68 44 
www.its.umu.se 




More information about the Openid-specs-ab mailing list