[Openid-specs-mobile-profile] Issue #194: https should be required for user_questioning_request_endpoint / user_questioning_request_endpoint (openid/mobile)

josephheenan issues-reply at bitbucket.org
Fri Dec 18 17:37:53 UTC 2020


New issue 194: https should be required for user_questioning_request_endpoint / user_questioning_request_endpoint
https://bitbucket.org/openid/mobile/issues/194/https-should-be-required-for

Joseph Heenan:

In [https://openid.net/specs/openid-connect-user-questioning-api-1\_0-11.html#rfc.section.3.1](https://openid.net/specs/openid-connect-user-questioning-api-1_0-11.html#rfc.section.3.1), unlike other urls defined in OIDC discovery, these two aren’t required to be https:

user\_questioning\_request\_endpoint

user\_questioning\_polling\_endpoint




More information about the Openid-specs-mobile-profile mailing list