you are right. while i find it inconceivable that this would be used, it
is not our job to protect people from themselves. MAY will do this.
b
Anne Anderson - Sun Microsystems wrote:
>
> It is up to the PDP and its configuration to decide whether to return
> such information.
>
> All I am suggesting is that we need to allow for the ability to have the
> PDP return a list of information required. I am not suggesting that the
> PDP MUST return such a list.
>
> I think we need to allow for the security concerns of the PEP
> as well as the security concerns of the PDP.
>
> Anne
