[Security Issue] Message Correspondence [Requirement] All [Comments] 
The RequestID correspondence mechanism can only be used if the Request Authentication mechanism can be relied upon. Otherwise the Digest Mechanism should be used.