[Openid-aiim] here's a threat comparison for Identity of user vs. Identity of relationship context

[Tom Jones]

https://docs.google.com/document/d/1MyHTKXJNCeqSKoHMBVE0YjYU_bUL-KLHuUkxEiboddw/edit?usp=sharing

I see no reason for user private data to be exchanged if some
resource (like payment) is needed.

I certainly see no reason for a travel package to be booked and paid for
w/o expliciet user consent to payment without seeing the itinerary!

I had help from bing-bot

Peace ..tom jones
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-aiim/attachments/20251029/e5bd1d35/attachment.htm>