<div dir="ltr">I have been using OpenSAML for a while but in the system we are using we validate all the messages ourself.<div><br></div><div>I have been thinking of instead using the built in spec validator <strong style="font-size:13px;margin-top:0px;margin-bottom:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.328125px">saml2-core-spec-validator.</strong></div>

<div><span style="font-size:13px;margin-top:0px;margin-bottom:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.328125px">Looking at the source code for example the conditions validator it does not validate attributes NotBefore and NotOnOrAfter.</span></div>

<div><span style="font-size:13px;margin-top:0px;margin-bottom:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.328125px"><br></span></div><div><span style="font-size:13px;margin-top:0px;margin-bottom:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.328125px">Is there a reason for this?</span></div>

<div><br></div><div><a href="http://grepcode.com/file/repo1.maven.org/maven2/org.opensaml/opensaml/2.5.1/org/opensaml/saml2/core/validator/ConditionsSpecValidator.java?av=f" target="_blank" style="font-family:arial,sans-serif;font-size:13px">http://grepcode.com/file/repo1.maven.org/maven2/org.opensaml/opensaml/2.5.1/org/opensaml/saml2/core/validator/ConditionsSpecValidator.java?av=f</a><br clear="all" style="font-family:arial,sans-serif;font-size:13px">

<div style="font-family:arial,sans-serif;font-size:13px"></div></div><div><div><br></div><div>--</div>Stefan</div>
</div>