Summarizing Where We're At
Dick Hardt
dick at sxip.com
Tue Oct 17 16:25:11 UTC 2006
On 16-Oct-06, at 3:24 PM, Recordon, David wrote:
> And here are my votes:
>
> Request nonce and name
> * Take no action
So you are saying to NOT rename the parameter?
+1 rename nonce to response_nonce
+1 to put request_nonce in an extension for RP identity related
functionality
> Authentication age
> * -1, write as an extension first
Hmmm, that seems different then what you wrote earlier.
If it is an extension, it will be an extension forever.
It is optional, and is part of auth.
I am +1 it is in the spec.
>
> Remove setup_url
> * 0 for removing, +1 for asking feedback from implementers
>
> Consolidated Delegation Proposal
> * -1 on status quo (draft 10)
> * 0 on single-identifier
+1
> * +1 on two-identifier
-1 -- two identifiers are redundant and confusing. 1.x spec only had
one identifier.
>
> Change default session type
> * +1
0
>
> Bare request
> * 0
+1
btw: I don't think we have all the issues here.
More information about the specs
mailing list