Notes From Draft 10
Recordon, David
drecordon at verisign.com
Mon Oct 16 22:48:25 UTC 2006
I'm happy to drop it, just wanted to throw it out there.
--David
-----Original Message-----
From: joshhoyt at gmail.com [mailto:joshhoyt at gmail.com] On Behalf Of Josh
Hoyt
Sent: Monday, October 16, 2006 3:48 PM
To: Marius Scurtescu
Cc: Recordon, David; specs at openid.net
Subject: Re: Notes From Draft 10
On 10/16/06, Marius Scurtescu <marius at sxip.com> wrote:
> > Just so that there is an obvious one way to do it, so that it's
> > easier to get right, if I understand David's motivation. It's also
> > easier to make clear in the spec.
>
> If ordering is not important then you are guaranteed to get it right.
But ordering *is* important whether a specific order is prescribed or
not. The same ordering has to be used when the signature is generated
and when it is checked.
> The spec could recommend alphabetical ordering, but I don't see the
> need for a must.
If it's not a MUST, then it doesn't clarify or simplify the procedure,
because it could still be any order.
Again, I don't care very much about making this change. Unless David
stands up for it, I'm going to drop it.
Josh
More information about the specs
mailing list