Thats not how I read his statement. When he calls attention to a structural flaw in a protocol it is usually because he wants to see if there is an opportunity to peddle his solution. Or maybe he wants to impress upon us all that this is a really, really hard problem before he puts his massive brain power to it. Can't see an application here for XKMS or SAML. So its probably something new.