Summarizing Where We're At

Dick Hardt dick at sxip.com
Tue Oct 17 16:25:11 UTC 2006


On 16-Oct-06, at 3:24 PM, Recordon, David wrote:

> And here are my votes:
>
> Request nonce and name
>  * Take no action

So you are saying to NOT rename the parameter?

+1 rename nonce to response_nonce
+1 to put request_nonce in an extension for RP identity related  
functionality

> Authentication age
>  * -1, write as an extension first

Hmmm, that seems different then what you wrote earlier.
If it is an extension, it will be an extension forever.
It is optional, and is part of auth.

I am +1 it is in the spec.

>
> Remove setup_url
>  * 0 for removing, +1 for asking feedback from implementers
>
> Consolidated Delegation Proposal
>  * -1 on status quo (draft 10)
>  * 0  on single-identifier

+1

>  * +1 on two-identifier

-1 -- two identifiers are redundant and confusing. 1.x spec only had  
one identifier.

>
> Change default session type
>  * +1

0

>
> Bare request
>  * 0

+1

btw: I don't think we have all the issues here.



More information about the specs mailing list