Re: [saml-dev] question on Holder fo the key

["Cantor, Scott E." <cantor.2@osu.edu>]

On 5/23/11 6:12 PM, "swu@axolotl.com" <swu@axolotl.com> wrote:
>Sorry to bother you guys, one of our client
>is using HOK and do not send any x509 certificate, I know OASIS spec
>requires
>that for HOK

No, it doesn't. HoK is an abstraction, it's out of scope how you decide
what constitutes a "key" and how it has to be used. That's left to other
material to define.

-- Scott