Re: URI serialization issues

FWIW, I just offered that text as a starting point, and it probably
goes further than it needs to from my POV.  I think I'd be happy if
you simply "linked" the choice of GET and POST to the security section
in *some* manner.

I'm also thinking that this might be worth taking to the TAG, just
from the POV of motivating beefing up the "whenToUseGet" finding which
doesn't cover this aspect of the issue.  I wouldn't want it to hold up
your work though.

Mark.