mozilla/browserid — Issue #500: verifier fails to verify certain assertions 
Author: lloyd
Created: 2011-10-27 16:59:49+00:00
State: open

the fix for issue #82 was intended to make it possible for RPs to include scheme and port for the verifier to increase the security of the system.

The fix was intended to be backwards compatible, but was not.

currently if audience is specifed without host nor scheme and the site is SSL, the verification will fail.

This is highest priority and is a RP facing regression.