[Openid-specs-fapi] Strong MERCHANT Authentication

[Anders Rundgren]

The blockchain folks often talk about "smart contracts" which are supposed to revolutionize payments as well as other things.

Personally, I'm into "moderately smart contracts" that are targeted at a more conventional payment market:
https://cyberphone.github.io/doc/payments/y2020-strong-merchant-authorization.pdf

I believe it is (about) time to do something creative with Merchants and their role in the payment landscape.   Strong Merchant Authorization may not be revolutionary but removing intermediaries do not seem to be generally worked on.  It's actually quite simple and scales as well as existing systems (although the slide doesn't show how).

Since payment authorizations are discrete transactional events rather than sessions, this scheme does not use MTLS.  Merchant signature keys are just key-pairs which get their authority from secure lookup services.

Thanx,
Anders