simpleauthorityHmm, actually, I'm thinking maybe I'll write my code such that it tries the POST request first, and on failure, fall back to the GET request. Although, I'm curious - was this in the spec / should it still be in the spec? In any case, thanks for the info!