Re: [security-services-comment] comment on SAML V2.0 X.500/LDAP AttributeProfile: non-string encoding

Scott Cantor wrote:

> I believe this was one of the edits that I neglected to copy from the errata
> version of the original profile in response to the same complaint. The text
> after (re)applying that errata would be:
> 
> "For all other LDAP syntaxes, the attribute value is encoded, as the content
> of the <AttributeValue> element, by base64-encoding [RFC2045] the contents
> of the ASN.1 OCTET STRING-encoded LDAP attribute value (not including the
> ASN.1 OCTET STRING wrapper)."

This revision also looks good to me, and if the X.500 folks find it
clearer, I think it's a winner, thanks.

Mark Wahl
Informed Control Inc.