Re: [security-services] Using SAML Artifacts in the WSS SAML TokenProfile

[Ron Monzillo <Ronald.Monzillo@Sun.COM>]

Conor P. Cahill wrote:

> 
> Greg Whitehead wrote on 7/7/2005, 11:55 AM:
> With the artifiact model, we get around this since the PII goes
> directly from the issuer to the recipient rather than through
> a third party.
> 
> Conor
>

Would exchange of a (non-encrypted) assertion id introduce any privacy 
concerns that do not apply when artifacts are exchanged?