ICRC-25: Security Review, Resolution of Findings

[frederikrothenberger]

See the attached security review: 2023-09 ICRC-25 Wallet Interaction Design Review.pdf

This issue will be used to track the resolution of the findings:

• [x] F01: Wallet should warn about unrecognized RPs
• [x] F02: Security Requirements Are Underspecified
• [x] F03: Permission scopes are too broad
• [x] F04: Standard neglects permission deletion
• [x] F05: RP is not required to verify failed calls to the target canister
• [x] F06: Authentication of RP relies on DNS and centralized authorities

[frederikrothenberger]

F01 addressed in #58.

[frederikrothenberger]

F02, F04 addressed in #59.

[frederikrothenberger]

F03 addressed in #60.

[frederikrothenberger]

F05 addressed in #64.

[frederikrothenberger]

F06 addressed in #62, by making it a property of the transport channel.

[frederikrothenberger]

All security findings have been addressed.