SAML Spoofing

[Cantor, Scott]

On 7/21/14, 9:43 PM, "Jeffrey T Eaton" <jeaton at cmu.edu> wrote:

>I¹ve seen the same sort of error messages, with jesterscourt.cc.   I
>assumed it was some sort of attack that was failing.

I'm still fascinated by the log message. It suggests to me that the Java
container is not doing canonical naming. That's not a huge exposure, but
it bears some thought and it definitely should be done if possible.

-- Scott