Profile Configuration and meaning of "conditional" setting
Peter Schober
peter.schober at univie.ac.at
Fri Apr 27 15:01:48 BST 2012
* Lukas Hämmerle <lukas.haemmerle at switch.ch> [2012-04-27 14:52]:
> sending unencrypted assertions via the user agent if the transport
> is secure?
The point is that the transport is not secure when pushing over the
browser: It is from the IdP to the user agent and it may be from the
user agent to the SP. But it's not from the Issuer to the Relying
Party.
-peter
More information about the users
mailing list