security-services message

Subject: compatibility of HoK profiles

From: "Tom Scavo" <trscavo@gmail.com>
To: "OASIS SSTC" <security-services@lists.oasis-open.org>
Date: Tue, 2 Sep 2008 09:15:45 -0400

Nate, can you reference the "Holder-of-Key Assertion Profile" in the
"Holder-of-Key Web Browser SSO Profile"?  If I change the Conformance
section in the former to require only ds:X509Certificate as "mandatory
to implement," then I believe the "Holder-of-Key Assertion Profile" is
(or easily can be) compatible with the "Holder-of-Key Web Browser SSO
Profile".

Comments?

Tom