RE: [security-services] Question on X509 Authn-based Attr Sharing Profile

["Randall Rick" <randall_rick@bah.com>]

Title: Message

Tom,

 

Out of band.

 

 ~ Rick

 

---

From: Thomas Wisniewski [mailto:Thomas.Wisniewski@entrust.com]
Sent: Wednesday, March 09, 2005 3:44 PM
To: security-services@lists.oasis-open.org
Cc: Scott Tomilson
Subject: [security-services] Question on X509 Authn-based Attr Sharing Profile

Rick, can you elaborate more on how the X509 Authn-based Attr Sharing Profile will use/verify holder-of-key?

 

Is it the intent that key information will be exchanged out of band (e.g., and KeyName would be used to identify the key)? Or are you planning on passing around X.509 Certs in the KeyInfo element?

 

All, is there a place on the Saml site that describes the usage/validation of the subject using holder-of-key identifier (more detail than the SAML 2 Profile spec)?

 

Thanks, Tom.