shibboleth-dev - Re: Attribute Queries in Shib 2

Subject: Shibboleth Developers

List archive

Re: Attribute Queries in Shib 2

From: "Tom Scavo" <>
To:
Subject: Re: Attribute Queries in Shib 2
Date: Mon, 9 Jul 2007 09:25:48 -0400
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=jzUTmG5uuyTh6HbSqUk6WsM7dJkjVUJUT9elC1/EFEjRvms90GxQWoJf+V4rRqBZhSO49plig11qOH/Pn2sxSH2s1Jb0K/9u9DYLH9TSzacNCHGEqKsjXHhRJ2UnshGH5c/RaYPQYT236E8vYyNA9fNf/Vs5qv/vDhFscDx9xaQ=

On 7/9/07, Ian Young
<>
wrote:

I'd be a little concerned by a default configuration that sent
unencrypted attributes through the front channel.

What attributes are you concerned about? If the name identifier is
opaque (transient or persistent) and the attributes are non-identity
attributes (affiliations and/or entitlements), there shouldn't be a
problem, right?

Tom

Attribute Queries in Shib 2, Chad La Joie, 07/05/2007
- RE: Attribute Queries in Shib 2, Scott Cantor, 07/05/2007
- Re: Attribute Queries in Shib 2, Ian Young, 07/09/2007
  - Re: Attribute Queries in Shib 2, Tom Scavo, 07/09/2007
    - Re: Attribute Queries in Shib 2, Ian Young, 07/09/2007
      - Re: Attribute Queries in Shib 2, Chad La Joie, 07/09/2007
      - Re: Attribute Queries in Shib 2, Tom Scavo, 07/09/2007
        
        RE: Attribute Queries in Shib 2, Scott Cantor, 07/09/2007
  - Re: Attribute Queries in Shib 2, Chad La Joie, 07/09/2007
    - Re: Attribute Queries in Shib 2, Ian Young, 07/09/2007
      - Re: Attribute Queries in Shib 2, Chad La Joie, 07/09/2007
        
        RE: Attribute Queries in Shib 2, Scott Cantor, 07/09/2007
      - Re: Attribute Queries in Shib 2, Jim Fox, 07/09/2007
        
        Re: Attribute Queries in Shib 2, Ian Young, 07/09/2007

List archive

Re: Attribute Queries in Shib 2