RE: [saml-dev] HoK assertions in the ICAM profile

> Didn't the SSTC send a letter to the U.S. government regarding
> holder-of-key assertions at one point?

Yes, but only in the context of the language being added to a new draft of
800-63 that has never gone past draft in the 2 years since, AFIK.

It wasn't done in order to reference specific profiles, just to push back on
the notion that some kind of assertion technology couldn't be used at LOA 4
if stronger confirmation than bearer were used.

-- Scott