Authorization has always been the primary question; authentication is simply an ancillary question to help answer it.

We are in the context of "who verifies the verifier?" :-)

Thanks!

Just to clarify, it's not about a new standard, folks. It's about giving things names to avoid confusion and mixing up different things.

Which is precisely, a standard