eazerad

Sign access decision?

4

Should the access decision be signed by the PDP private key to ensure that the payload has not been tampered with?

PDP may want to keep a stateful session between the PEP and PDP. Rationale: you could provide further input that would be used for the PDP to make a decision;...