Etienne Urbah on 2010-03-17

• Propose requirement with title  'For Client authentication, Services MUST accept BOTH RFC-3820-compliant X509 proxies and SAML assertions'

Luigi's comment on 2010-04-14

• perhaps conflicts with AA3.2, AA3.3. A service MUST or MAY accept BOTH RFC-3820-compliant X509 proxies and SAML assertions?

Morris, Balazs and Etienne on 2010-04-21

• Redefined title, because a more general statement of variety of authentication methods was necessary :  'For Client authentication, Services must accept a certain number of authentication methods'
• Source = General
• Spreadsheet ID = 17

Amsterdam meeting on 2010-04-28

• Open  (clear, but NO agreement found yet)

Chicago meeting on 2010-06-22

• Change title to 'For Client authentication, Services must accept all following authentication methods: Full X509, X509 Proxy'
• Agreed YES