[Openid-specs-ab] Issue #1269: Add Security Considerations for Cross-device SIOP (openid/connect)

[Kristina Yasuda]

New issue 1269: Add Security Considerations for Cross-device SIOP
https://bitbucket.org/openid/connect/issues/1269/add-security-considerations-for-cross

Kristina Yasuda:

A very thorough Security Considerations section is needed for Cross-device SIOP model \(SIOP and RP on different devices\), since it has different security considerations than “same-device“ SIOP and potentially opens up new attack surface that implementors should be warned against.

Responsible: Kristina Yasuda