@mhoye Also an attack on the not-too-level playing field enabled by open #InternetStandards, as with the use of #ClientSideAttestation, they get to make sure it's only "authorized" implementations.