Problem Domain
 “Open Office” –like communication between
    mutually suspicious parties
 Confused deputy attack
 A web service is a deputy