fre, 27 06 2008 kl. 18:49 -0700, skrev SitG Admin: > By using Verisign's public key to decrypt the assertion? Exactly. It would be a matter of defining the procedure in the policy. -- Anders Feder <lists.anders at feder.dk>