<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">I've attached a pdf of
with my comments on Lite draft 8. It appears that some of these
were discussed on the call yesterday. Please ignore those if a
resolution has been reached.<br>
<br>
Thanks,<br>
George<br>
</font><br>
On 8/11/11 2:57 PM, John Bradley wrote:
<blockquote
cite="mid:5DA97E95-27EC-48A9-AE2C-1CD1F0D0F28B@ve7jtb.com"
type="cite">
<pre wrap="">Updated lite.
The introspection endpoint is renamed to be consistent with session management. I think the name is clearer for the function.
Per my discussion with Breno I made it clear that it is a OAuth 2 protected resource per the spec and not something special.
That required removing the text about it being possible to overload it on the token endpoint. That probably is not a good idea as they now have different security.
I referenced session management and the full spec to redirect people to there for a fuller explanation.
PPID is only mentioned in security considerations.
We should discuss if it should be in the lite spec.
Some IdP will use PPID by default. I think a discussion of how that should be calculated needs to be included otherwise RP will be surprised if they change something and all the user_id change.
I may only make the first part of the call. I have a 6:20 flight.
John B.
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Openid-specs-ab mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Chief Architect AIM: gffletch
Identity Services Engineering Work: <a class="moz-txt-link-abbreviated" href="mailto:george.fletcher@teamaol.com">george.fletcher@teamaol.com</a>
AOL Inc. Home: <a class="moz-txt-link-abbreviated" href="mailto:gffletch@aol.com">gffletch@aol.com</a>
Mobile: +1-703-462-3494 Blog: <a class="moz-txt-link-freetext" href="http://practicalid.blogspot.com">http://practicalid.blogspot.com</a>
Office: +1-703-265-2544 Twitter: <a class="moz-txt-link-freetext" href="http://twitter.com/gffletch">http://twitter.com/gffletch</a>
</pre>
</body>
</html>