On Jul 4, 2019, at 3:32 PM, Tom Pusateri <pusateri@xxxxxxxxx> wrote:
The client is a computer program, not a person, so there is no chance that it will be able to figure out what went wrong! :) Seriously, though, what’s the strategy the client should follow in this case? I think we generally say “try again in an hour” but I’m not sure if we said that explicitly here or just in the DSO document.
I think that how resolver support for this will work is an open question right now, which will probably have to be addressed in a follow-on document. At present, the implementation I’ve done doesn’t even attempt the local resolver, because I couldn’t figure out how to implement that. I’m assuming that in most cases there’s no particular benefit to using the local resolver, because the auth server will also be local. |