[hellojesus]

What prevents the requesting party from saving the random bytes and then connecting with the signing party to link the user with the service?