> It is now clear that the needed attributes will be dynamic...
> Why should I make an extension in AuthnRequest while the AttributeQuery
has
> all the functionalities I need...
> It seems more simple to authorize a POST binding for attributeQueries
rather
> than to extend the authnRequest !
Because it's an extra round trip, probably 4-6 extra RSA operations, and I
seriously doubt that most implementations would allow for it. Of course, the
latter is true of an extension as well at the moment.
-- Scott
