Profile Configuration and meaning of "conditional" setting

Peter Schober peter.schober at univie.ac.at
Fri Apr 27 15:01:48 BST 2012


* Lukas Hämmerle <lukas.haemmerle at switch.ch> [2012-04-27 14:52]:
> sending unencrypted assertions via the user agent if the transport
> is secure?

The point is that the transport is not secure when pushing over the
browser: It is from the IdP to the user agent and it may be from the
user agent to the SP. But it's not from the Issuer to the Relying
Party.
-peter


More information about the users mailing list