Subject: Re: [rtcweb] Benjamin Kaduk's Discuss on draft-ietf-rtcweb-security-arch-18: (with DISCUSS and COMMENT)

From: Sean Turner <[email-masked]>
Date: Wed, 15 May 2019 10:20:24 -0400

> On Apr 14, 2019, at 13:02, Sean Turner <[email-masked]> wrote:
> 
>> I'm a bit unclear about how the port in the IdP URI's Authority (Section
>> 7.5) would get discovered.  If it can be remotely supplied, there may be
>> risks in just trusting blindly whatever value is received.
> 
> Ted started a thread on this here:
> https://mailarchive.ietf.org/arch/msg/rtcweb/8dtCkSeXWUsb_y2SRyFlbQ5r93w
> We’ll see where it lands.

Submitted a PR to address this:
https://github.com/rtcweb-wg/security-arch/pull/92

spt