[Openid-specs-mobile-profile] Issue #55: CIBA signed result objects? (openid/mobile)

[Axel Nennker]

New issue 55: CIBA signed result objects?
https://bitbucket.org/openid/mobile/issues/55/ciba-signed-result-objects

Axel Nennker:

Should we - at least - recommend that the OP signs the authentication result object?
Here:
https://xml2rfc.tools.ietf.org/cgi-bin/xml2rfc.cgi?Submit=Submit&format=ascii&mode=html&type=ascii&url=https://bitbucket.org/openid/mobile/raw/tip/draft-mobile-client-initiated-backchannel-authentication.xml?at=default#successful_authentication_request_acknowdlegment

and here:
https://xml2rfc.tools.ietf.org/cgi-bin/xml2rfc.cgi?Submit=Submit&format=ascii&mode=html&type=ascii&url=https://bitbucket.org/openid/mobile/raw/tip/draft-mobile-client-initiated-backchannel-authentication.xml?at=default#issuing_successful_token