I'm still digesting the documentation but it looks like it would be susceptible to replay attacks also. But if all the web transactions were happening over TLS

I'm still digesting the documentation but it looks like it would be susceptible to replay attacks also. But if all the web transactions were happening over TLS with PFS, and everyone is validating certificates, I think that would be good enough.