text on request/response protection?

[tlodderstedt]

triggered by the FAPI discussion, shall we say something regarding JAR/JARM etc?

[tlodderstedt]

• request: early authentication, integrity (generic solution instead of app specific solutions, e. g. utilizing staging resources), confidentiality
• response: sender authentication, integrity, confidentiality