diff --git a/draft-ietf-oauth-status-list.md b/draft-ietf-oauth-status-list.md index a41581a..0371961 100644 --- a/draft-ietf-oauth-status-list.md +++ b/draft-ietf-oauth-status-list.md @@ -617,7 +617,7 @@ Resulting in the byte array and compressed/base64url-encoded status list: Implementers should be particularly careful for the correct parsing and decoding of the status list. Incorrect implementations might check the index on the wrong data or miscalculate the bit and byte index leading to an erroneous status of the Referenced Token. Beware, that bits are indexed (bit order) from least significant bit to most significant bit (also called "right to left") while bytes are indexed (byte order) in their natural incrementing byte order (usually written for display purpose from left to write). Endianness does not apply here because each status value fits within a single byte. -Implementations shall always verify correctness using the test vectors given by this specification. +Implementations are RECOMMENDED to verify correctness using the test vectors given by this specification. ## Security Guidance for JWT and CWT