Mashaling signed assertion causes assertion signature validation to fail

[Cantor, Scott]

On 7/17/15, 5:47 PM, "dev on behalf of Gang Yang" <dev-bounces at shibboleth.net on behalf of gang.yang at shonborn-becker.com> wrote:
>
>It seemed the signature is vary fragile. Even the seemed "read-only" operations can break it.

All XML signatures are fragile. You're breaking the signature by changing the octets, so whatever you think is read-only, isn't.

-- Scott