RE: [security-services] binding-11: browser/POST profile

> Line 738 of of binding-11 talks about Assertion Bearer as a value to 
> <saml:ConfirmationMethod>. But I couldn't find the 
> appropriate value in section 
> 7.1 of core-27. What should be the correct ConfirmationMethod 
> value in the Browser/POST profile case?

It's been missing for a while, but it's on the issue list. Plus which, a
lot of the URI values are pending a decision about possible use of oasis
URNs and format in general, so I've just been using placeholders until
they're set.

-- Scott