OpenSAML user discussion

["Scott Cantor" <>]

> Some cases however require the decrypted Element to exist as part of a
> Document's tree, e.g. ID resolution.  So the Decrypter has an option to do
> that.  It's turned off by default, b/c it's expensive relatively speaking
> and most cases probably don't require.  But signature verification on the
> decrypted Assertion would.

Why is it expensive? I thought Java had adoptNode implemented.
 
In my case, yes, xmlsec internally re-parses the XML after its been
decrypted.

-- Scott