dumb clients a risk?

[Dan Libby]

I'll leave the big theoretical question to others.       :-)

Zefiro wrote:

>I wasn't able to test this, since I wasn't able to get the PHP identity server to run. But changing the Location: header is
>quite easy to do for the end user, no change to the browser needed, just a little perl proxy script. So I consider this a high
>risk.
>  
>
Hmm, what was the problem?   I assume you are referring to the
sampleserver.php?    If you'd like, email me off-list and we can try and
work it out.

>Now please soothe me that I made a miskate in my reasoning somewhere :)
>
>*purrrr*
>
>  
>