idp on port 80 only ?

[Peter Schober]

* Tom Zeller <tzeller at dragonacea.biz> [2013-04-18 19:22]:
> > Possible, yes, reasonable, probably not so much, it's the sort of
> > thing people frown on.
> 
> Because a port-80-only idp would be insecure, or nonstandard ?

If you're relying on the transport layer to provide confidentiality
a. for the subject's credentials and b. her user agent's session
cookies, well, you've lost all that,
-peter