On 2/6/07, Scott Cantor <> wrote:
>
> Since confirmation is essentially how you take a bare assertion and turn it
> into a security token, I guess a query asking for one would be a query from
> something that wants to use the assertion as a security token.
So, for example, a self-query for attributes could ask for two
holder-of-key SubjectConfirmations, one binding the principal's key
and the other binding an SP's key, so that the SP could forward the
assertion to another SP. (I know I'm stepping on a land mine here,
but what the heck :)
Tom
