RE: [security-services] Proposal for assertion-level subjects

From
Scott Cantor <>
Date
2004-02-26T18:59:08+00:00
ID
000001c3fc94$03301cf0$
Thread
RE: [security-services] Proposal for assertion-level subjects
> Are you concerned about repeating the confirmation process or its 
> representation in the assertion. Avoiding both would be desirable. The 
> former seems more significant to me.

Both. The common case (today) is bearer, and as such is just wasted space,
so that is a bigger factor.

If in future HOK or equivalent became common, then the space savings would
pale next to the runtime cost, and people would be forced to do bizarre DOM
equivalence testing to try and avoid repeating the verification.

It's a bad idea not to optimize it out no matter how you slice it.

-- Scott