[Openid-specs-fapi] Issue #338: A5 attacker model? (openid/fapi)

[Brian Campbell]

New issue 338: A5 attacker model?
https://bitbucket.org/openid/fapi/issues/338/a5-attacker-model

Brian Campbell:

With "shall distribute discovery metadata \(such as the authorization endpoint\) via the metadata document as specified in \[OIDD\] and \[RFC8414\]" in baseline, is the "A5 - Read Token Requests and Responses" really relevant?

‌