Re: [security-services] Proposal for assertion-level subjects
>As usual with this defaulting idea, the edge case is how to say there's a >default confirmation and then override it in a statement to say "no >confirmation", but one could simply rule that out and say you can't default >it in that case. Again, not common, so it doesn't seem a big deal to me. > > Are you concerned about repeating the confirmation process or its representation in the assertion. Avoiding both would be desirable. The former seems more significant to me. >-- Scott > > >