Notes From Draft 10

Recordon, David drecordon at verisign.com
Mon Oct 16 22:48:25 UTC 2006


I'm happy to drop it, just wanted to throw it out there.

--David 

-----Original Message-----
From: joshhoyt at gmail.com [mailto:joshhoyt at gmail.com] On Behalf Of Josh
Hoyt
Sent: Monday, October 16, 2006 3:48 PM
To: Marius Scurtescu
Cc: Recordon, David; specs at openid.net
Subject: Re: Notes From Draft 10

On 10/16/06, Marius Scurtescu <marius at sxip.com> wrote:
> > Just so that there is an obvious one way to do it, so that it's 
> > easier to get right, if I understand David's motivation. It's also 
> > easier to make clear in the spec.
>
> If ordering is not important then you are guaranteed to get it right.

But ordering *is* important whether a specific order is prescribed or
not. The same ordering has to be used when the signature is generated
and when it is checked.

> The spec could recommend alphabetical ordering, but I don't see the 
> need for a must.

If it's not a MUST, then it doesn't clarify or simplify the procedure,
because it could still be any order.

Again, I don't care very much about making this change. Unless David
stands up for it, I'm going to drop it.

Josh




More information about the specs mailing list