[wss] draft 7 comments

[Frederick.Hirsch@nokia.com]

A couple of comments on Core draft 7 (merged) 

1. In section 8 the new edit I believe should have "security tokens" in the two places
we now have "<SecurityToken> elements". Likewise "SecurityToken elements" can be "security tokens".
Lines 810-814

Thus we have

"Placing claims in one or more security tokens that also convey the signing keys is the mechanism
to create the binding of the claims. Each of these security tokens must be referenced with a <SecurityTokenReference> in the <ds:KeyInfo> element in the Signature.  The security tokens can be
signed, or not, depedning on the relying party trust model and other requirements."

2. Likewise in section 13, should "<SecurityToken> elements" be replaced with "security tokens"?
("It is strongly RECOMMENDED that a message sender sign any security tokens that it is confirming and that are
not signed by their issuing authority."   Line 1506

2. Does the end of line 699-700 make sense? Should "and therefore such references may be unique"
be removed? 

3. Line 785  RECOMMENDED (typo)


regards, Frederick
 
Frederick Hirsch
Nokia Mobile Phones