Question regarding metadata

Issue #334 resolved
Daniel Fett created an issue

Part 1 currently says:

1. shall support [OIDD] and may support [RFC8414];
1. shall only distribute discovery metadata (such as the authorization endpoint) via the metadata document as specified in [OIDD] and [RFC8414].

What is the meaning/purpose of “only” in the second clause? That metadata should not be distributed through other means than the metadata document? What would be the purpose of this?

Comments (12)

  1. Tom Jones

    what the various sites do with metadata is out-of-scope for open id. Also note that the dictionary element of the aggregated claim distributes metadata.

  2. Log in to comment