- Require explicit user approval on registration
- Embed eTLD list instead of fetching remotel
- Support compressed requests (single appId and challenge)
- Do not reveal to webpage if that a device is enrolled without explicit user action
- Smaller bugfixes