RE: [wss] HMAC Key Derivation in UsernameToken Profile Issue

>If we have all agreed that the UsernameToken profile is pushing key derivation out of scope, we should make this clear as well.

Sounds reasonable to put this into the UsernameToken profile as a note. Any objections, if not I can do so and post tonight ?

Anthony Nadalin | work 512.436.9568 | cell 512.289.4122