Skip to Content.
Sympa Menu

shibboleth-dev - RE: Strawman AuthnRequest profile #2 (ignore previous)

Subject: Shibboleth Developers

List archive

RE: Strawman AuthnRequest profile #2 (ignore previous)


Chronological Thread 
  • From: "Scott Cantor" <>
  • To: "'Tom Scavo'" <>
  • Cc: "'Shibboleth Developers'" <>
  • Subject: RE: Strawman AuthnRequest profile #2 (ignore previous)
  • Date: Wed, 5 Jan 2005 20:59:02 -0500
  • Organization: The Ohio State University
> Oh, now I see why Destination is "obvious"...it is *required* when the
> message is signed (with POST, e.g.). Okay, good. :-)

Right, but you correctly note that this doesn't really take into account the
WAYF. Not unless the WAYF resigns its own copy, anyway. Not impossible, but
definitely overhead.

But integrity on AuthnRequests is not usually essential, merely nice to
have.

-- Scott


Archive powered by MHonArc 2.6.16.

Top of Page