saml-dev message

Subject: encrypting saml protocol messages

From: "Yang, Gang USA CTR (US)" <gang.yang.ctr@mail.mil>
To: "saml-dev@lists.oasis-open.org" <saml-dev@lists.oasis-open.org>
Date: Mon, 24 Oct 2011 19:08:33 +0000

Hi,

I'm trying to implement Web SSO profile and wondering why SAML 2.0 did not define the encryption of SAML procotol messages (request/response), but only encryption of the SAML assertion and some sub elements. Can any one shed some light on this?

Thanks,

Gang

Follow-Ups:
- RE: [saml-dev] encrypting saml protocol messages
  - From: Hal Lockhart <hal.lockhart@oracle.com>
- Re: [saml-dev] encrypting saml protocol messages
  - From: "Cantor, Scott" <cantor.2@osu.edu>