Open sysrqb opened 6 months ago
From the adoption call:
It would be interesting to mention how this setup interact with CORS in the Web environment. An issuer could restrict their responses to attester.example/* for instance. The use of wrapped response would not benefit from this sanitasation.
From the adoption call: