Security
Requestor and Grantor entities are mutually authenticated prior to any interaction.
Distrust
- Is assumed between Grantor and Requestor
- Must be Binding (perhaps non-repudiation)
Classic Security Issues:
- Replay prevention
- Third party can’t interfere or reuse interaction