unencrypted assertions not working

[Cantor, Scott]

On 4/4/13 7:20 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 4/4/13 7:14 PM, "lalithj" <j_lalith at hotmail.com> wrote:
>>
>>Thier argument is considering the endpoints are https, and also
>>considerting
>>the nature of the data, does it really matter?
>
>Nobody can make that assessment for you. I would just note that it's not
>their data, so exactly what basis do they have for telling you what to do
>in protection of it? If somebody tried to pull that with me, irrespective
>of my feelings about the answer, they'd get a response you can probably
>predict.

I would add, though, that in deciding not to support encryption, they're
basically telling you they have no interest in your business if you have
this requirement. So that leaves the decision in your (or more likely your
boss') hands. You just have to decide if you agree with them or not and
how much you care.

-- Scott