new PE in profiles

Line
556-7: “a NotOnOrAfter attribute that limits the window
during which the assertion can be delivered.”

The
NotOnOrAfter in a ConfirmationData element isn’t about a window when the
assertion can be delivered. Core defines it as being the time after which the
subject cannot be confirmed.  That’s independent of assertion
delivery. I think the text in Profiles should be changed.

Rob Philpott

Senior Consulting Engineer

RSA Security Inc.

Tel: 781-515-7115

Mobile:
617-510-0893

Fax: 781-515-7020

Email: 

I-name:  =Rob.Philpott