Comments on Auth 2.0 - Pre-Draft 11

Josh Hoyt josh at janrain.com
Wed Dec 13 23:33:17 UTC 2006


On 12/12/06, Joaquin Miller <joaquin at netmesh.us> wrote:
>  How about one of these:
>
>>     When a message is sent as a POST, OpenID parameters MUST be sent only in
>> the POST body and the parameters processed MUST be only those from the POST
>> body.
>
>>    When a message is sent as a POST, OpenID parameters MUST be sent only in
>> and processed only from the POST body.
>
>  Instead of:
>
>> When a message is sent as a POST, OpenID parameters MUST only be sent in and
>> processed from the POST body.
>
>  (I feel the first of the two alternative above captures the intention much
> better.  We are aiming to make each clause of this document clear for folks
> who don't already know what we have in mind, right?)

I think Johnny's wording is fine, but if it were to be changed, I
would prefer the second of the two alternatives that you proposed.

Josh



More information about the specs mailing list