idp on port 80 only ?

[Cantor, Scott]

On 4/18/13 1:21 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>> Possible, yes, reasonable, probably not so much, it's the sort of thing
>> people frown on.
>
>Because a port-80-only idp would be insecure, or nonstandard ?

Non-standard in a kind of wiggly way. https://something:8443 at least
doesn't look off. Using port 80, which is understood to be http only, is
the sort of thing you'd see a phisher do.

-- Scott