Re: [OAUTH-WG] Comments on Assertions draft 00 by Yaron Goland

2011-08-26 Thread Brian Campbell
Couple comments on the comments inline: On Wed, Aug 10, 2011 at 3:39 PM, Mike Jones wrote: > > 4.1. Using Assertions for Client Authentication:  Comment on “client_id”: > “It seems like a bad idea to have the client_id outside of the assertion. > It’s either redundant or insecure.” > I tend to a

[OAUTH-WG] Comments on Assertions draft 00 by Yaron Goland

2011-08-10 Thread Mike Jones
Author List: Change "MSFT" to "Microsoft" (twice). Author List: Change "Yaron Goland" to "Yaron Y. Goland". 2. Overview: Change "privliged" to "privileged". 2. Overview: Change "messsage" to "message". 3. Authentication vs. Authorization: Add a period after "vs" so the title becomes "A