I would recommend removing the nonce parameter entirely in favor of moving all of that kind of thing into a different layer as described in w3c-fedid/FedCM#536.
This suggestion came up here w3c-fedid/FedCM#582 (comment), so kicking this issue off here to track it independently of the other issue.
This is a backwards incompatible change, so requires some thought put into coordinating with existing deployments, but I think is one that is worth pushing through.
Depends on #2 .
This suggestion came up here w3c-fedid/FedCM#582 (comment), so kicking this issue off here to track it independently of the other issue.
This is a backwards incompatible change, so requires some thought put into coordinating with existing deployments, but I think is one that is worth pushing through.
Depends on #2 .