OpenID Provider Authentication Policy Extension

[Johnny Bufu]

David,

On 22-Jun-07, at 9:46 AM, Recordon, David wrote:

> So please, check it out and let me know what you think...especially
> around the questions in the Editorial Comments section at the end.
>
> http://openid.net/specs/openid-provider-authentication-policy- 
> extension-
> 1_0-01.html

Hope you're still welcoming feedback on this..

While trying to explain what PAPE is/does, I noticed that the term  
'authentication policy' is not explicitly defined in the spec (and  
how a policy differentiates from a specific authentication  
mechanism). A clear definition could help eliminate confusion between  
the two.


Johnny