2 ms·
Interesting. Seems like it could interact with (for instance) confirmation-of-payee systems in the UK, through use of the "name" field. I can see it growing al
by Nursie 5y ago
Interesting. Seems like it could interact with (for instance) confirmation-of-payee systems in the UK, through use of the "name" field.
I can see it growing all sorts of new fields though, and being used maliciously. I guess security considerations are largely out of scope for the rfc though.
- richardwhiuk 5y agoNot sure entirely out of scope - there is a security considerations section - https://datatracker.ietf.org/doc/html/rfc8905#section-8 https://datatracker.ietf.org/doc/html/rfc8905#section-8
- Nursie 5y agoIt's certainly there, but for anything approaching the sphere of payment systems, seems rather short. I wonder how such a thing might play with things like OpenBanking payment services...