responsibility

[Tom Jones]

Add a clarifying comment to FAPI #2

Following this profile as written is not sufficient to prove the user bears responsibility for the security of the transaction.

[Dave Tonge]

Tom, I'm not sure this is worth adding. The FAPI specs make no guarantees of the liability framework of any particular payment transaction. How the authorisation server authenticates and gains authorisation from a user for a transaction is outside of the scope of this spec.

[Tom Jones]

i will review and try to find a better way to clarify a specific area where responsibility should be specified