BTW, I reorganized the SVN layout on the server a little bit. The old URL now points to an old version of the draft. The latest version will from now on always be here: <a href="http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oauth_extension.html">http://step2.googlecode.com/svn/spec/openid_oauth_extension/latest/openid_oauth_extension.html</a><div>
<br></div><div>Dirk.<br><br><div class="gmail_quote">On Fri, Nov 21, 2008 at 4:11 PM, Allen Tom <span dir="ltr"><<a href="mailto:atom@yahoo-inc.com">atom@yahoo-inc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
A couple minor edits are needed to Section 12: Security Considerations.<br>
<br>
I assume that the response_token in Section 12 is the same as the request_token in Section 9. The terminology needs to be consistent.<br>
<br>
"Is" shoudl be changed to "are" in the phrase "The following security principles is reflected in this design"<br>
<br>
Otherwise, the spec is looking pretty good!<br><font color="#888888">
<br>
Allen</font><div><div></div><div class="Wj3C7c"><br>
<br>
Dirk Balfanz wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Ok, new version is up. I took out the sentence that recommended to send a cancel. I also added a section on discovery (just copied whatever the AX extension says about that).<br>
</blockquote>
</div></div></blockquote></div><br></div>