Josh Grossman

We need to make all this clearer during the rework

Current situation: | # | Description | L1 | L2 | L3 | CWE | [NIST §](https://pages.nist.gov/800-63-3/sp800-63b.html) | | :---: | :--- | :---: | :---: | :---: | :---:...

> . o O ( can not see any proposal to review ) LOL you really do get every notification

let's leave it for now. I think we need to think about this more.

Could you try and prepare something like this @ike? Thanks!

Hi @ike, any update on this?

Hey @ike! Good to see you back! Let me know how it goes :)

Some more details: History: | # | Description | L1 | L2 | L3 | CWE | [NIST §](https://pages.nist.gov/800-63-3/sp800-63b.html) | | :---: | :--- | :---: | :---: | :---:...

There has been discussion of 2.10.1 at #1032

> 3.5.2 sounds more like it should either: > > 1. Be in section [2.10](https://github.com/OWASP/ASVS/blob/master/5.0/en/0x11-V2-Authentication.md#v210-service-authentication) where we discuss intra-service authentication > 2. It should be made more generic to be...