stefan-evinance

- Trusting EHRs: usually JWTs are issued and signed by a third party, not by the party using the token. As mentioned in the spec, discovering the EHR's public key...