Messages - 2.1.2.1 Requiring nonce makes request_uri non-chacheable

[John Bradley]

All REQUIRED The OpenID Request Object MUST contain all REQUIRED OAuth 2.0 Authorization Request parameters

We made "nonce" REQUIRED.

This would require every request_uri to be different and make them not cacheable.

[Edmund Jay]

WG agrees this is issue but doesn't plan to address before implementor's draft.

[Michael Jones]

Nonce is no longer requred to be in the request object