On 11/7/12 10:39 AM, "Mike Wiseman" <mike.wiseman at utoronto.ca> wrote: >Re: Subject - this *is* about Attribute Query, not Artifact Resolution. I >confused those in my first email. Alright, then the security implications are different. This isn't authenticating the user, so the impact of a MITM is purely information disclosure. -- Scott