Skip to Content.
Sympa Menu

shibboleth-dev - Re: [Shib-Dev] Return of the Java SP... again

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] Return of the Java SP... again


Chronological Thread 
  • From: Chad La Joie <>
  • To:
  • Subject: Re: [Shib-Dev] Return of the Java SP... again
  • Date: Wed, 25 Aug 2010 15:32:00 -0400
  • Organization: Itumi, LLC

I would feel uncomfortable doing that. It feels like it would be encouraging a bad practice. Like you I don't get super freaked about pushing unencrypted attributes but I do feel it's not the ideal situation.

On 8/25/10 3:29 PM, Scott Cantor wrote:
Well, I think the problem is that there is quite a large SAML 1 only
install base right now and a lot of them aren't show much sign of
moving. We still know there are a significant number of folks running
Shib 1.3 and many of the other opensource IdPs are are SAML 1 only.

I guess a compromise with possibly useful side effects is not supporting
queries, so people would have to push attributes in the client with no
encryption. That seems to bug people, so I guess that's a way of
accomodating without encouraging.

-- Scott




--
Chad La Joie
http://itumi.biz
trusted identities, delivered



Archive powered by MHonArc 2.6.16.

Top of Page