security-services message

Subject: RE: [security-services] underspecified behavior for AuthenticationQuery ?

From: Emily Xu <Emily.Xu@Sun.COM>
To: pmishra@netegrity.com
Date: Thu, 28 Feb 2002 09:37:51 -0800 (PST)

Prateek,

> 
> What do you think of weakening lines 519-521 to be:
> 
> The source site MUST not return an assertion if it receives
> a <samlp:Request> message from an authenticated destination 
> site X containing an artifact issued by the source site issued
> to some other destination site Y, where X <> Y.
> 
> This is more consistent with our "return no assertion" policy.

The new writeup looks good to me.

Thanks,
Emily