RE: [security-services] Re: [iaeg] FYI:SP 800-63 Rev. 1

["Scott Cantor" <cantor.2@osu.edu>]

> The assurance level indication within the assertion may be implicit (e.g.,
> through the identity of the Verifier implicitly indicating the resulting
> assurance level) or explicit (e.g., through an explicit field within the
> assertion.)

FWIW, this is also one of the motivating use cases for my Entity Attribute
metadata extension...putting tags into metadata identifying the LOAs which
an issuer is allowed to assert.

-- Scott