This is an alternative to PR #2020 and does not rely on a single arbitrary string provided by the relying party. It instead allows the platform and the authenticator to differentiate "moving money from account A to account B" from "sharing health data of John Doe with hospital X".
This is an alternative to PR #2020 and does not rely on a single arbitrary string provided by the relying party. It instead allows the platform and the authenticator to differentiate "moving money from account A to account B" from "sharing health data of John Doe with hospital X".
Preview | Diff