Location
§7.5 and §13.
Problem
The draft says a continuity_handle is not an authenticator, but does not separately state that recognizing the same backing human is not evidence of consent or authorization for the current action.
human-approved covers the presentation according to profile-defined semantics. It is not automatically authorization of the HTTP request or application operation.
Proposed text
tbd
Location
§7.5 and §13.
Problem
The draft says a
continuity_handleis not an authenticator, but does not separately state that recognizing the same backing human is not evidence of consent or authorization for the current action.human-approvedcovers the presentation according to profile-defined semantics. It is not automatically authorization of the HTTP request or application operation.Proposed text
tbd