Question on X509 Authn-based Attr Sharing Profile

Title: Message

Rick, can you 
elaborate more on how the X509 Authn-based Attr Sharing Profile will use/verify 
holder-of-key?

 

Is it the intent 
that key information will be exchanged out of band (e.g., and KeyName would be 
used to identify the key)? Or are you planning on passing around X.509 
Certs in the KeyInfo element?

 

All, is there a 
place on the Saml site that describes the usage/validation of the subject 
using holder-of-key identifier (more detail than the SAML 2 Profile 
spec)?

 

Thanks, 
Tom.