Topic: Integrity of the Directory
I'm curious what validation happens when sites are submitted to this directory? How do you ensure that a fake ofx server isn't inserted into the list?
I'd love to use the API to grab the full list of banks, but I also don't want to expose my customers to have their bank passwords intercepted.