OpenSAML user discussion

["Scott Cantor" <>]

Deena Gurajala wrote on 2009-08-25:
> You can use the following method to decompress the incoming request.

Your code is just reimplementing the MessageDecoder framework that's already
in the library.

Signature verification, which was the original question, is a hugely complex
issue, since verification alone is still leaving out the trust question.

Verification alone relies on a Validator object, I think.

-- Scott