SignAssertions action not needed ?

[Cantor, Scott]

On 2/5/14, 11:13 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>Well, I assume you'd do it like I did the security-oriented
>MessageHanders:  you just look for the presence of a
>SecurityParametersContext and the relevant -Parametesr, and use it if
>present.

I missed the SecurityParametersContext. I see it now in the docs you
wrote, but my brain wasn't empty enough to have room for it when I read
them Monday and started working on this today.

>Also related: For message signing, the presence/absence of the
>SecurityParametersContext data is what determines whether signing
>happens, pure and simple.  Whether the context is present or has a
>particular -Parameters is (presumably) determined by the various signing
>and encryption flags from the profile config (or whatever, e.g  however
>we implement 'conditional' - or not).

You probably want to note that in the Javadoc and/or your notes page.

-- Scott