Re: [xacml] request's attribute assertion lifetime?

[Anne Anderson <Anne.Anderson@Sun.COM>]

On 4 March, Frank Siebenlist writes: Re: [xacml] request's attribute assertion lifetime?
 > It just intrigues me why we have this InstantIssue element of the attribute 
 > defined? What was the use case for that?

Good question.  I think it should be removed.  Why didn't we
include validity interval?  It would have made more sense, but we
didn't.  I think both fall into the category of "things the
Context Handler is supposed to check".

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692