RE: [security-services] Proposal for assertion-level subjects

[Scott Cantor <cantor.2@osu.edu>]

> Are you concerned about repeating the confirmation process or its 
> representation in the assertion. Avoiding both would be desirable. The 
> former seems more significant to me.

Both. The common case (today) is bearer, and as such is just wasted space,
so that is a bigger factor.

If in future HOK or equivalent became common, then the space savings would
pale next to the runtime cost, and people would be forced to do bizarre DOM
equivalence testing to try and avoid repeating the verification.

It's a bad idea not to optimize it out no matter how you slice it.

-- Scott