<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
#email-body { min-width: 30em !important; }
#email-page { padding: 8px !important; }
#email-banner { padding: 8px 8px 0 8px !important; }
#email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
#email-fields { padding: 0 8px 8px 8px !important; }
#email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
<tr valign="top">
<td id="email-page" style="padding:16px !important;">
<table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
<tr valign="top">
<td bgcolor="#ffffff" style="background-color:#ffffff;color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://shibboleth.net/images/shib_240x83.png" alt="" style="vertical-align:top;" /></td>
</tr><tr valign="top">
<td id="email-banner" style="padding:32px 32px 0 32px;">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
<img id="email-avatar" src="https://issues.shibboleth.net/jira/secure/useravatar?ownerId=rdw%40iay.org.uk&avatarId=10124" alt="" height="48" width="48" border="0" align="left" style="padding:0;margin: 0 16px 16px 0;" />
<div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
<a class="user-hover" rel="rdw@iay.org.uk" id="email_rdw@iay.org.uk" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rdw%40iay.org.uk" style="color:#326ca6;">Rod Widdowson</a>
created <img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/IDP-405'>IDP-405</a>
</div>
<div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
<a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/IDP-405'><strong>Crypto defaults for Legacy relying party.xml</strong></a>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr valign="top">
<td id="email-fields" style="padding:0 32px 32px 32px;">
<table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
<tr valign="top">
<td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Issue Type:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> Bug
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Assignee:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#326ca6;">Scott Cantor</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Components:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
Configuration, Profile Handling, Relying Party </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Created:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
06/May/14 5:58 AM
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Description:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<p style='margin-top:0;margin-bottom:10px;'>This is a follow up from a discussion we had last week.</p>
<p style='margin-top:0;margin-bottom:10px;'>In order to have the same security defaults as V2 the legacy relying-party.xml hard wires the defaults for 5 of the crypto mechanisms:</p>
<p style='margin-top:0;margin-bottom:10px;'> signResponses , signAssertions, signRequests, encryptAssertions, encryptNameIDs</p>
<p style='margin-top:0;margin-bottom:10px;'>The last two only being of interest to SAML2 profiles of course.</p>
<p style='margin-top:0;margin-bottom:10px;'>We want to avoid this "look in the parser to find the default" behaviour, but I am not sure right now <b>what</b> the correct defaults are, especially for those settings whose defaults in V2 were "conditional" - I assume that the in the other cases we can do local per profile override in the constructor if that is relevant.</p>
<p style='margin-top:0;margin-bottom:10px;'>I am also not sure what the correct defaults should be so I'm starting this case with Scott - I am happy to do the legwork once we know what the answer is.</p>
<p style='margin-top:0;margin-bottom:10px;'>For the record these are the current default wirings. "config" means that the default that is hard wired in the parser "class" is the default in the class. I note that as of now all classes have the same signing defaults (because this happens in the base class) and all SAML2 classes have the same encryption result (because that happens in the SAML2 base class).</p>
<p style='margin-top:0;margin-bottom:10px;'>SAML1ArtifactResolutionProfile</p>
<ul class="alternate" type="square">
<li>config signResponses "Conditional", signAssertions "never", signRequests, "conditional"</li>
<li>class signResponses AlwaysTrue, signAssertions AlwaysFalse, signRequests AlwaysFalse,</li>
</ul>
<p style='margin-top:0;margin-bottom:10px;'>SAML1AttributeQueryProfile</p>
<ul class="alternate" type="square">
<li>config signResponses "Conditional", signAssertions "never", signRequests, "conditional"</li>
<li>class signResponses AlwaysTrue signAssertions AlwaysFalse, signRequests AlwaysFalse,</li>
</ul>
<p style='margin-top:0;margin-bottom:10px;'>ShibbolethSSOProfile</p>
<ul class="alternate" type="square">
<li>config signResponses "Always ", signAssertions "never", signRequests, "conditional"</li>
<li>class signResponses AlwaysTrue signAssertions AlwaysFalse, signRequests AlwaysFalse,</li>
</ul>
<p style='margin-top:0;margin-bottom:10px;'>SAML2ArtifactResolution</p>
<ul class="alternate" type="square">
<li>config<br/>
signResponses "never", signAssertions "always", signRequests, "conditional"<br/>
encryptAssertions "conditional", encryptNameIDs "never", </li>
</ul>
<ul class="alternate" type="square">
<li>class signResponses AlwaysTrue, signAssertions AlwaysFalse, signRequests AlwaysFalse,<br/>
encryptAssertions AlwaysTrue, encryptNameIDs "never" </li>
</ul>
<p style='margin-top:0;margin-bottom:10px;'>SAML2AttributeQueryProfile</p>
<ul class="alternate" type="square">
<li>config<br/>
signResponses "conditional", signAssertions "never", signRequests, "conditional"<br/>
encryptAssertions "conditional", encryptNameIDs "never" </li>
</ul>
<ul class="alternate" type="square">
<li>class signResponses AlwaysTrue, signAssertions AlwaysFalse, signRequests AlwaysFalse,<br/>
encryptAssertions AlwaysTrue, </li>
</ul>
<p style='margin-top:0;margin-bottom:10px;'>SAML2BrowserSSOProfileParser & SAML2ECPProfil</p>
<ul class="alternate" type="square">
<li>config<br/>
signResponses "never", signAssertions "always", signRequests, "conditional"<br/>
encryptAssertions "conditional", encryptNameIDs "never"</li>
</ul>
<ul class="alternate" type="square">
<li>class signResponses AlwaysTrue, signAssertions AlwaysFalse, signRequests AlwaysFalse,<br/>
encryptAssertions AlwaysTrue, </li>
</ul>
<p style='margin-top:0;margin-bottom:10px;'>SAML2LogoutRequestProfile</p>
<ul class="alternate" type="square">
<li>config<br/>
signResponses "conditional", signAssertions "never", signRequests, "conditional"<br/>
encryptAssertions "conditional", encryptNameIDs "never"</li>
</ul>
<ul class="alternate" type="square">
<li>class signResponses AlwaysTrue, signAssertions AlwaysFalse, signRequests AlwaysFalse,<br/>
encryptAssertions AlwaysTrue, encryptNameIDs "never"</li>
</ul>
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Fix Versions:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
3.0.0 </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Project:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a style="color:#326ca6;" href="https://issues.shibboleth.net/jira/browse/IDP">Identity Provider</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Priority:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.shibboleth.net/jira/images/icons/priorities/major.png" height="16" width="16" border="0" align="absmiddle" alt="Major"> Major
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Reporter:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="rdw@iay.org.uk" id="email_rdw@iay.org.uk" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rdw%40iay.org.uk" style="color:#326ca6;">Rod Widdowson</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Original Estimate:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
6 hours
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Remaining Estimate:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
6 hours
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td><!-- End #email-page -->
</tr>
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
This message is automatically generated by JIRA.<br />
If you think it was sent incorrectly, please contact your JIRA administrators<br />
For more information on JIRA, see: <a style='color:#326ca6;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
</td>
</tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->