#dev 2021-07-05

2021-07-05 UTC

sknebel Zegnat: no, you cant do it cross-domain, because otherwise I can just claim to trust e.g. davids token endpoint and then I get a valid token for you that I can use to read stuff as you