Messages - 6.8 underspecified Check ID Response verification #3

[Former user]

"4. If nonce is present, verify that it is the same value as the one that was sent in the authorization request."

This is incomplete, nonces must also be checked against replay/reuse (otherwise it shouldn't be called nonce here).

[Edmund Jay]

fixes #203 Messages - 6.8 underspecified Check ID Response verification 3

→ e693ca03fde6