Re: [security-services] Formalize meaning of multi-statement vs.multi-assertion

[John Kemp <john.kemp@nokia.com>]

Hi Scott,

ext Scott Cantor wrote:

>I think we had a conversation at one point re-affirming the conclusion that
>all else being equal, there was no difference between having 2 assertions
>with one statement and 1 assertion with 2 statements.
>  
>
Assuming that the subject in each assertion is the same, right? Two 
statements in the same assertion can /only/ be about the named subject 
at the assertion level these days, which is different than previous 
versions of SAML.

>There's a brief allusion to this in core in the encryption discussion that
>mentions something being in section 2. But I can't any explicit comment in
>section 2 saying the two are equivalent...
>  
>
Why provide two equivalent mechanisms? What does equivalence mean in 
this case? Perhaps the answers to these questions are what we ought to 
document...

- JohnK