Re: [security-services] Re: comments re sstc-saml-holder-of-key-browser-sso-draft-05

This is along the lines of what I was thinking, yes.  I'd like to use this as a strawman to begin discussion about keying information supported along with the proposed endpoint approach on the next call.

On 10 Aug 2008, at 23:29, Tom Scavo wrote:

One possibility, I suppose, is:
 

 
<md:X509DataBinding>
 
  http://www.w3.org/2000/09/xmldsig#X509Certificate
 
</md:X509DataBinding>
 

 
Of course multiple such elements would be permitted, just like
 
<md:NameIDFormat>.