HTTP-POST vs. ECP

[Cantor, Scott]

On Jul 14, 2012, at 9:11 AM, "Tom Scavo" <trscavo at gmail.com> wrote:

> On Fri, Jul 13, 2012 at 5:55 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>> 
>> In practice, you
>> see basic-auth and client TLS as the main options (and we all laugh at the
>> client TLS thing, but it's more or less free on the IdP end to support it).
> 
> I'm up for a good laugh, can you elaborate about client TLS in this case?

I just meant all the things that "support" client TLS neatly ignore the part where it's undeployable for ordinary users.


-- Scott