Verification a template

[hdknr]

Described in a message submitted to SPEC-CX. ( http://lists.openid.net/pipermail/openid-specs-cx/2010-April/000079.html )

SHA-256 digest is not for the ownership for the template.

• Realm for CX Service URI. If the URI is of OP, there seems to be no problem for the OP to accept the proposal.
• Digital signature to the template. We must provide some structured format including digital signature like CX Contract XML.
• OP can use CX service whitelist /blacklist for accepting a proposal. But this is a development matter and should not be a protocol part.