New issue 839: Standard - Add x-frame-options to security consideration https://bitbucket.org/openid/connect/issue/839/standard-add-x-frame-options-to-security Nat Sakimura: For frame busting to avoid click jacking. It may even be normative.