security-use message

Subject: Another issue about Issue Group 12 (Encryption)

From: Irving Reid <Irving.Reid@baltimore.com>
To: "'security-use@lists.oasis-open.org'" <security-use@lists.oasis-open.org>
Date: Tue, 03 Apr 2001 19:33:03 -0400

I was just re-reading the Strawman 3 document, and noticed that there is
currently an explicit non-goal that SAML will not protect messages from
interception by third parties; this is left up to the transport mechanism.

The issue group 12 decisions may force removal of this non-goal
(specifically, if we choose encryption of individual SAML messages or
assertions)

 - irving -

Follow-Ups:
- RE: Another issue about Issue Group 12 (Encryption)
  - From: Darren Platt <dplatt@securant.com>