unencrypted assertions not working

[lalithj]

Hi Scott,

Yes I do agree, we need to follow the best practice (encryption).

As things in the Test region (Still),  I have already raised the requirement
for the encryption before production deployment.

But for my knowledge, considering the handshake in happenning  on SSL (https
end points), what sort of security issue will this cause?

Can you technically let us know technially what sort of hacking somebody can
do on this, if the end points are on https?

Thanks





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/unencrypted-assertions-not-working-tp7585820p7585859.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.