indieweb / indieauth

IndieAuth.net website code and IndieAuth Specification
52 stars 7 forks source link

Expressly Note a TLS/HTTPS requirement #103

Open dshanske opened 2 years ago

dshanske commented 2 years ago

The IndieAuth spec should expressly note a requirement of HTTPS for endpoints.

stokito commented 2 years ago

Also url normalization must expand example.com to https://example.com by default