Messages 2.5 - Clarify that email_verified rules are context specific

[Michael Jones]

Mark Wahl was asking what the verification rules are for email_verified. We should explicitly state that the meaning of email_verified is dependent upon the trust framework or other context in which it is used. I suggest adding the following:

The means by which an e-mail address must be verified is context-specific, and dependent upon the trust framework or contractual agreements within which the parties are operating.

[John Bradley]

OK

[Michael Jones]

We will add this clarification.

[Michael Jones]

We can say that this typically means that the OP has taken steps to ensure that this is an e-mail address owned by the user.

[Nat Sakimura]

"OpenID Provider has taken an affirmative steps to insure that the email identifier was under the control of the user at the time of the verification. "

Put note on how it is typically used.

[Michael Jones]

Fixed #797 - Clarified the intended semantics of e-mail verification and that the precise verification rules are context-specific.

→ <<cset 3aab3c3b9efe>>