#indieweb 2013-09-16

2013-09-16 UTC

aaronpk but then to validate the auth code and retrieve the domain name of the person that belongs to, the RP would also have to include the same nonce value in the request to /verify