1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. connect
  4. Issues

Discovery 3.4 - Simple Web Discovery endpoint unreachable fallback dangerous

Issue #286 resolved
Michael Jones created an issue

The Discovery draft currently says:

3.4. Error

If the Simple Web Discovery endpoint is unreachable or returns an error, then the RP may prepend https: to the host from Sec 3.1 and use that as the issuer.

This seems dangerous. This fallback "discovery" mechanism should be deleted.

Comments (2)

  3. Log in to comment
Assignee
Type
bug
Priority
major
Status
resolved
Component
–
Milestone
–
Version
–
Votes
0
Watchers
0
Jira: the preferred issue tracker for Bitbucket. Join the team!