[wss-comment] Easy Question: Why not use ds:RetrievalMethod

[Joseph Reagle <reagle@w3.org>]

In the 1.2 Example, for exampe:
1. Why is the token in the header, and not a child of KeyInfo? Is this 
because the header is necessary for demonstrating the order of processing? 
(The actual key could still be in a KeyInfo even if you indicated a 
processing step in the header...?)
2. Within the KeyInfo, why not use a ds:RetrievalMethod instead of:
  (023)        <ds:KeyInfo>
  (024)            <wsse:SecurityTokenReference>
  (025)             <wsse:Reference URI="#MyID"/>
  (026)            </wsse:SecurityTokenReference>
  (027)        </ds:KeyInfo>


-- 
Joseph Reagle Jr.                 http://www.w3.org/People/Reagle/
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/Signature/
W3C XML Encryption Chair          http://www.w3.org/Encryption/2001/