[Openid-specs-ab] Issue #1346: Relying Parties are often behind firewalls (openid/connect)

[mbj]

New issue 1346: Relying Parties are often behind firewalls
https://bitbucket.org/openid/connect/issues/1346/relying-parties-are-often-behind-firewalls

Michael Jones:

As we make protocol choices, we should be aware that many Relying Parties live behind firewalls.  This means that direct Web access to them, such as POST operations, are impossible.  \(Note that user agents _can_ redirect to these RPs, since they’re also running behind the firewall on behalf of the end-user.\)

This means that proposed protocol flows, such as **Response-as-Push** [https://bitbucket.org/openid/connect/pull-requests/50](https://bitbucket.org/openid/connect/pull-requests/50) will often not be possible.