[Openid-specs-ab] Candidate OpenID Connect errata correction drafts published

Andrii Deinega andrii.deinega at gmail.com
Mon Aug 14 17:23:02 UTC 2023


Hi Michael,

Two very minor things.

1. The pragma HTTP response header can be removed from all examples from
all specs. Take a look at an old discussion in the OAuth 2 WG. OAuth 2.1
spec does not have any references to it either.

2. The no-store is the strongest cache directive and it already includes
no-cache. Hence, the use of "Cache-Control: no-store" in all examples
should be enough.

Regards,
Andrii


On Sun, Aug 13, 2023 at 3:23 PM Michael Jones via Openid-specs-ab <
openid-specs-ab at lists.openid.net> wrote:

> I’ve published drafts incorporating all the proposed errata corrections
> for the OpenID Connect family of specifications.  This is a major step
> along the way both towards publishing our second errata set for OpenID
> Connect and for submission to ISO as Publicly Available Specification (PAS)
> standards.
>
>
>
> The drafts incorporating the errata corrections are:
>
>    - https://openid.net/specs/openid-connect-core-1_0-32.html
>    - https://openid.net/specs/openid-connect-discovery-1_0-35.html
>    - https://openid.net/specs/openid-connect-registration-1_0-37.html
>    - https://openid.net/specs/openid-connect-backchannel-1_0-11.html
>
>
>
> The History sections of the specs describe each of the changes made.  If
> you want to see the precise changes incorporated, I suggest using your
> favorite HTML-capable diff tool (such as Microsoft Word) and comparing the
> baseline docs below to the ones above:
>
>
>
>    - https://openid.net/specs/openid-connect-core-1_0-errata1.html
>    - https://openid.net/specs/openid-connect-discovery-1_0-errata1.html
>    - https://openid.net/specs/openid-connect-registration-1_0-errata1.html
>    - https://openid.net/specs/openid-connect-backchannel-1_0-final.html
>
>
>
> Diffs are also possible for the .txt and .xml versions of the specs; just
> substitute “html” in the URLs above for “txt” or “xml” and use your
> favorite diff tool.
>
>
>
> I plan to ask for working group review of these changes during tomorrow’s
> working group call.  Following the working group review, we’ll hold the
> foundation-wide 45-day proposed errata review and then the approval vote.
>
>
>
>                                                        -- Mike
>
>
>
> P.S.  Our two Implementer’s Guides were also updated in parallel to keep
> them current with the versions incorporating errata corrections.  The
> corresponding versions are:
>
>    - https://openid.net/specs/openid-connect-basic-1_0-44.html
>    - https://openid.net/specs/openid-connect-implicit-1_0-27.html
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-ab
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20230814/0bf3334e/attachment-0001.html>


More information about the Openid-specs-ab mailing list