Encode/Decode AuthnRequest

[Cantor, Scott]

> When I try to decode the AuthnRequest that we are passing to an IDP, I
> don't get anything usable.  I've tried GZip and .Net's  DeflateStream.

Botching the DEFLATE step is common due to the difference between actual gzip and the pure deflate step, there's a header that has to be omitted.
 
>  Do I have the encoding and decoding process corrent?

Conceptually, unless you didn't read the bindings spec, in which case I suppose that's your next step.

> What compression does shib use?

I use zlib and the Java just uses what's built in. With the right settings to avoid the gzip header.

>  Is the XML signed with a cert?

Nothing is ever signed with a certificate (that's not how RSA works) and no, it's not an XML Signature.

-- Scott