Comment by cobbzilla

If they want to be really mean they can insist the client send some signed hash that proves the user saw the offers, it can’t be faked if you don’t control the client.