Re: [security-services] Changes for Core 26

[Stephen Farrell <stephen.farrell@baltimore.ie>]

Scott Cantor wrote:
> 
> > All URIs contained in SAML elements (whether as element or attribute
> > values) MUST be compared as specified in [RFC2396]. In particular this
> > means that "http://foo.com/go/to/the/pub/" represents the same
> resource
> > as "HTTP://FoO.CoM:80/go/../go/to/the/pub".
> 
> Stephen, do you (or anyone else) know if this is the rule specified by
> the relevant XML standards for comparing namespace URIs?

That being an XML question the obvious answer is: "Dunno" :-)
 
> I'm specifically curious about that in the context of using URIs as
> identifiers for things like confirmation methods or audience
> restrictions.

Good catch. I was only thinking of resources.

Stephen.

-- 
____________________________________________________________
Stephen Farrell         				   
Baltimore Technologies,   tel: (direct line) +353 1 881 6716
39 Parkgate Street,                     fax: +353 1 881 7000
Dublin 8.                mailto:stephen.farrell@baltimore.ie
Ireland                             http://www.baltimore.com