RE: [saml-dev] SAML2HoKAP question

["Josh Howlett" <Josh.Howlett@ja.net>]

The SAML 2.0 Holder of Key confirmation method is (by definition)
agnostic with respect to the key information that does the confirmation.
However, while this profile is intended to address the /specific/ case
of X.509 key information and usage, the title of the specification (and
the sister Web SSO profile) do not suggest this.

The consequence is that it is possible that we may end up with the 'SAML
V2.0 Holder of Key Assertion Profile' (for the X.509 case) and the 'SAML
V2.0 Holder of Key Assertion Profile for Foo' (for the Foo crypto case).

This isn't necessarily a bad thing, but it might be confusing.
Consequently, might it be prudent to rename this specification as 'SAML
V2.0 Holder of Key Assertion Profile for X.509 certificates', or
something similar?

josh.

JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG