RE: [security-services] x509 Authn-based Profile

> Rick, one more typo in the doc
>  
> on line 150  s/<Assertion> in the <Response>/<Response>/
>  
> i.e., the intent is that we are signing the assertion the way 
> back and not the response that contains the assertion 
> (aligning with what is said later in the doc).

I assumed if the Request was signed for some reason, then the Response would
be.

-- Scott