CIBA: wording around using 503

The text “An OP in a meltdown type situation may return an HTTP 503 with a Retry-After response header…” from https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html#rfc.section.10.1 came up in the FAPI WG call this morning. And not in a particularly flattering light with the word “meltdown” in particular.

Something like “An OP experiencing heavy load may return an HTTP 503 with a Retry-After response header…” would probably be better/preferable.

‌

Comments (3)