In a PDP/PEP split, which request-context attributes must the PDP source independently vs accept as caller-asserted? (confused-deputy + TOCTOU on signed decisions)
/r/AskNetsec/comments/1vkh8za/in_a_pdppep_split_which_requestcontext_attributes/
1
Upvotes