> By forcing the user to decide whether they trust the actual domain where the ID token will be sent, and not displaying any sort of logo which can be faked, se

> By forcing the user to decide whether they trust the actual domain where the ID token will be sent, and not displaying any sort of logo which can be faked, security is improved. Hilarious. Look, security UI is hard. Like, stumps experts hard. Like, they've been working at it for decades, trying to educate the population, hard. I appreciate the will and the effort (as someone looking for their goldilocks OIDC proxy,) but this claim is a bit strong.