geo-location use case

[janaiyengar]

The issuer only needs a key per geo, not a key per {ORIGIN_ID, GEO} tuple. While it might be useful to do this per origin, it isn't necessary for the use case.

This particular use case also then requires the Issuer to trust the Mediator, since the Mediator is the one that determines the user's geo.

[FredericJacobs]

If the key is not per origin_id, tokens can be reused across origins. So I think that we must partition by origin_id, no? @tfpauly

[tfpauly]

@FredericJacobs the token message that's signed includes the origin name, so the issuer doesn't need to have per-origin keys.