New issue 1621: 6.1 TLS requirements shoudl be stated https://bitbucket.org/openid/connect/issues/1621/61-tls-requirements-shoudl-be-stated Nat Sakimura: Right now, it just says HTTP GET or HTTP Redirects. Perhaps we may want to state some TLS requirements with it.