Hi, I have some notes I thought I could share, that provides feedback to this specification. I am working on iAB Canada TPI #3 and #4 assessment and I noticed that for #3 - controller address is added again, but, I do think its a good idea to focus on the safety, security, privacy, and or consent access point and method, for TPI#3, (for future reference) For #4 - browsers are making it more difficult t get t the SSL certificate and for IAB - you actually have to download it to see the USA part of the Cert. Need to use Chrome browser to get it now. And, they hide analytics. So it’s a good example of SSL certificate being masked as much as possible to hide the little detail that demonstrates non-compliance at a national security level. If anyone else is into auditing IAB from the US perspective, #4 what score would you give it? - from Canada TPI-4 I think is a -1, Best, Mark