Sharebar?

What security issues does LTI 1.1.1?

What security issues does LTI 1.1.1?

I just got a news email with an LTI 1.1.2 security update:
https://www.imsglobal.org/spec/lti/security-update/v1p0

It is not at all clear what security issues this is suppose to fix.

Does anyone know what security issue with LTI 1.1.1 this is suppose to fix?

Thanks,
Søren

PS: 1.1.1, have privacy issues when using http, but that can easily be fixed with https.