OpenSAML user discussion

["Scott Cantor" <>]

> The Security header is not included in the signature.  Some of its
> components are, and the id-wsf 2 spec requires that the Signature be a
> single signature referencing multiple signed elements and be a child
> of the Security header.  The Timestamp and any SAML Assertion token is
> also signed.

Yeah, my mistake, sorry.

> Is there something missing in my understanding?  What is not
> appropriate about this?

Just because WSF might assume one signature child, that still doesn't make
that base class appropriate. It's just not the same use case as a single
reference to the parent element.

-- Scott