Shayne Miel (he/him)
Shayne Miel (he/him)
@appsdesh The text says that the Transmitter MAY send the 400 code if the delivery method is not available. But the intro to the table says "Errors are signaled" which...
Non-normative change. Should be included in v1
The following was not covered in the security audit, but came up during the interop: We should provide some guidance on how aud values are set. It seems like implementers...
Is there a backwards-compatible way that we could do this that would still provide value?
> Push and Pull are delivery mechanisms defined outside the SSF spec. We should not introduce new aspects specifically targeting a single delivery mechanism in the SSF spec I agree....
Specifying something that was not previous specified can be considered backwards-incompatible. How should we handle this?
@appsdesh That argument makes sense to me. The "request a verification" endpoint can return successfully even if the transmitter is not able to send the verification event. The two moments...
This was discussed at length in the 2/11/25 meeting: https://hackmd.io/@oidf-wg-sse/wg-meeting-20250211
@apoorvadeshpande-okta and @jischr to chat about combining PRs
See this comment on a different issue: https://github.com/openid/sharedsignals/issues/207#issuecomment-2613004060