Decrypting attributes on-the-fly

[Nate Klingenstein]

Griffin,

I would start by asking the vendor why they care about these internal details of your implementation.  I would emphasize that you understand that you are responsible for data security once you have received it and you take this responsibility seriously and describe how you are protecting that information through the decryption process.

If they still have that demand, then yes, you have to select one of the other options discussed on this thread.

Thanks,
Nate.

On Mar 28, 2014, at 5:15 AM, "Griffin Cheng [CLIB]" <cscheng at cpce-polyu.edu.hk<mailto:cscheng at cpce-polyu.edu.hk>>
 wrote:

However, the vendor says I cannot perform the decryption this way but somehow, requires to change the “Apache module for Shibboleth” instead (mod_shib?).

Does it mean that I need to modify the mod_shib?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140328/a324bd2f/attachment.html