New issue 1267: Security Considerations for ASC https://bitbucket.org/openid/ekyc-ida/issues/1267/security-considerations-for-asc Daniel Fett: * In particular, that TC MUST NOT and SAO SHOULD NOT be used without PAR or JAR. Responsible: Daniel Fett