Migration - (te) 2., and 6. verification rule (by Markus)

[Nat Sakimura]

In sections 2 and 6, something feels a bit strange about retrieving the "iss" simply with a plain GET and Content-Type application/json. I was wondering if this shouldn't instead use OIDC Issuer Discovery / Webfinger? But of course it would work the way it is written now.

[Michael Jones]

Tentatively rejected since doing any more is probably unnecessarily complicated, but we should find out whether the xri.net implementation will work.

[Nat Sakimura]

Markus accepted to reject.