ISSUE-163: Make (sure) 9.4 is internally consistent [wsc-xit] from Web Security Context Working Group Issue Tracker on 2008-01-02 (public-wsc-wg@w3.org from January 2008)

From: Web Security Context Working Group Issue Tracker <sysbot+tracker@w3.org>
Date: Wed, 2 Jan 2008 19:36:39 +0000 (GMT)
To: public-wsc-wg@w3.org
Message-Id: <20080102193639.35B8B6B5EA@tibor.w3.org>

ISSUE-163: Make (sure) 9.4 is internally consistent [wsc-xit]

http://www.w3.org/2006/WSC/track/issues/

Raised by: Mary Ellen Zurko
On product: wsc-xit

9.4

"Web Sites that require their users to be redirected from an unsecure web page to a secure web page MUST do it as a single step rather than multi-step (redirect to an unsecure page and then redirect again to a secure page). This specification recommends that the web page MUST use direct links to a secure page rather than using redirects."

I'm confused. Isn't the first line in conflict with the second? Doesn't it say you can do something that the second line says you cannot?

Received on Wednesday, 2 January 2008 19:36:42 UTC