Shibboleth Developers

[Jim Fox <>]

We intend to support personal infocards by verifying
the assertion's signature and, instead of looking through
metadata for matching keyinfo, we just pass that on to
the application.  It is responsible for registering new
users and recognizing old ones.

Is there a preference for how we give the keyinfo to
the app?  A block of KeyInfo xml in the environment
might work for unix.  Something stuck in a header
for windows?

Jim