Re: [dss] KeySelector/KeyInfo

[Rich Salz <rsalz@datapower.com>]

>     <KeySelector>
>         <ds:KeyInfo>
>             <ds:X509Data>...</ds:X509Data>
>         </ds:KeyInfo>
>     </KeySelector>

I also prefer this.  Verbosity doesn't both me -- we're talking about 
XML, and not only that, but mounds of base64-encoded strings.  Also, 
this lets future versions extend KeySelector, such as by letting the 
client include an ordered list of possible keys to use.  Or perhaps by 
including a SAML assertion that gives proof of right to use the key.
	/r$
-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html