#dev 2018-09-19

2018-09-19 UTC

aaronpk this example in 4.1.1.5 is actually an example of two different mechanisms. 1) an authorization server at a different domain, and 2) the user's website knowing that it is served via https