Formal security analysis of the Credential Issuance and Credential Presentation

[Nat Sakimura]

As we expect a lot of applications would be depending on this, and it is a bit different from traditional OpenID so we probably cannot rely on the previous results; it is a good practice to do a formal analysis. We need to find a sponsor.

[Kristina Yasuda]

Other issues on this topic, mainly #1562 that has links to all other issues. I think @Torsten Lodderstedt is on top of this.

[Kristina Yasuda]

closing since this is a duplicate issue