Signatures in v3 vs v2

[Cantor, Scott]

> I was wondering if it is possible that I could change how the signatures work
> for one of my SPs in v3.  I have made other changes for security settings and
> alternate credentials in v3 relying party, but can't find a setting corresponding
> to something like this

signAssertions and signResponses are the controlling properties.

Signing assertions is historical and avoided now when encryption is on because allowing unsigned encrypted data exposes an XML Encryption flaw, but unless SPs actually enforce that (and certainly nothing this broken would), it doesn't much matter what you do.

-- Scott