Re: Unlang clarification

*You can of course mandate something like the outer identity must equal the inner identity, or require anonymous@..., which would make the identity spoofing issue one of anonymisation alone.