On 1/31/07, Valerio Venturi <valerio.venturi@cnaf.infn.it> wrote:
On Wed, 2007-01-31 at 09:38 -0500, Tom Scavo wrote:
On 1/31/07, Valerio Venturi <valerio.venturi@cnaf.infn.it> wrote:
Or are you talking about assertions travelling within X.509 proxies?
Yes, the latter. See the following wiki page for some crude thoughts along these lines:
Thanks, we'll have a look at it. However, in our plans, the natural format for attributes in X.509 proxies extensions will still be ACs so I don't know if it will be a needs for us.
Understood.
Valerio, would you mind providing a pointer to the spec you're looking at? There have been many versions and I want to make sure you're looking at the right one. http://www.oasis-open.org/committees/document.php?document_id=20000&wg_abbrev=security
Ah, that's what I thought...you should work from this instead: http://www.oasis-open.org/committees/download.php/21568/sstc-saml2-profiles-... It's not significantly different than the previous one, but it is the current version on the table. Tom