idp on port 80 only ?

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2013-04-18 19:29]:
> * Tom Zeller <tzeller at dragonacea.biz> [2013-04-18 19:22]:
> > > Possible, yes, reasonable, probably not so much, it's the sort of
> > > thing people frown on.
> > 
> > Because a port-80-only idp would be insecure, or nonstandard ?
> 
> If you're relying on the transport layer to provide confidentiality
> a. for the subject's credentials and b. her user agent's session
> cookies, well, you've lost all that,

Sorry, you were referring to RFC 2817 and suggesting an implementation
in Shib code? Is there even client support?
-peter