Base64 image in SAML assertion

[MikeWho]

Cantor, Scott E. wrote
> Well, it won't really. If it's too big, it's too big. Whether you get a
> 500 error because of one request or many, it still won't work.
> 
> -- Scott

Sure, it fixes half the problem - user profile images being included in
every request - but not the other half: what happens if the image is so
large it exceeds some header/packet/attribute limit along the way. 

It would certainly be preferable to just send an image URL which we could
later fetch, but I doubt that the client would want the images publicly
accessible nor would they likely want to spend the effort to make them
available securely via a download script. 

We'll likely go for securing the initial resources which create the session,
increase the header buffer size where practical, and hopefully encourage the
client to keep the image size as small as possible.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Base64-image-in-SAML-assertion-tp7589623p7589651.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.