Neocase HR and portal apps?

Mark K. Miller max at psu.edu
Tue Aug 16 12:02:06 EDT 2016


On Tue, 16 Aug 2016, Cantor, Scott wrote:

>> Yet another 'personal sanity check' for me, if you don't mind...  Am I
>> correct in thinking that turning off signing and encryption for this SP
>> would make the SHA-1/SHA-2 difference a moot point?
>
> Turning off signing would, sure, but I trust I don't need to explain 
> why that's not a good idea.,

No, I was already cautioning about that myself.  This is only a 
second-choice, temporary stop gap option.

>                              and if you did and it worked, you've just 
> exposed a complete break in their SP.

You mean, if only I disabled it, but not them?  That would be a very 
broken SP!  No, I was really only suggesting disabling signing on both 
ends.

> This doesn't have anything to do with encryption.

Thank you for that little bit of additional sanity!  ;-)

> -- Scott

Max


More information about the users mailing list