Server losing secrets?

[Brad Fitzpatrick]

On Sat, 25 Jun 2005, Paul Crowley wrote:

> Brad Fitzpatrick wrote:
> > -- if server doesn't remember that handle, you reply like you would in
> >    dumb mode, where you simply pick your own handle.  consumer will
> >    then have to verify using dumb mode
>
> In general, if the consumer has any problem with the server's response,
> it should try dumb mode.

Nobody disagrees there.  The question was how the server should signal
(via the UA) that a given handle will never be good and should be
uncached.

Do you agree with the approach we discussed?  (and yes, it'd be signed)

- Brad