saml-dev message

Subject: Re: [saml-dev] Signature with HTTP Redirect Binding

From: "Tom Scavo" <trscavo@gmail.com>
To: "valerie.bauche@bull.net" <valerie.bauche@bull.net>
Date: Tue, 5 Jun 2007 09:23:47 -0400

On 6/5/07, valerie.bauche@bull.net <valerie.bauche@bull.net> wrote:
>
> So how does the receiver knows the public key to be used to verifiy the
> signature ?

Metadata.

> Does it have to maintain a list of all possible senders with their
> associated public key ?

Yes, in SAML metadata.

Tom

References:
- Signature with HTTP Redirect Binding
  - From: valerie.bauche@bull.net