Couple comments on the comments inline:
On Wed, Aug 10, 2011 at 3:39 PM, Mike Jones wrote:
>
> 4.1. Using Assertions for Client Authentication: Comment on “client_id”:
> “It seems like a bad idea to have the client_id outside of the assertion.
> It’s either redundant or insecure.”
>
I tend to a
Author List: Change "MSFT" to "Microsoft" (twice).
Author List: Change "Yaron Goland" to "Yaron Y. Goland".
2. Overview: Change "privliged" to "privileged".
2. Overview: Change "messsage" to "message".
3. Authentication vs. Authorization: Add a period after "vs" so the title
becomes "A