Re: [saml-dev] =?UTF-8?B?UsOpZi4gOiBSRTogW3NhbWwtZGV2XSBBdHRyaWJ1?==?UTF-8?B?dGVRdWVyeSA6IHdoeSBTT0FQIGJpbmRpbmcgPw==?=

[Chad La Joie <chad.lajoie@switch.ch>]

Because two is one more than one?

If you did what Scott suggest you have one round trip; an authn request
with a response that contains an authn statement and an attribute
statement.  This request/response pair (due to signing and various other
things) requires a certain number of crypto operations.  Nothing else is
needed.  If you do what you suggested you have two request/response
pairs (hence one more round trip than before) with twice the number of
crypto operations.

That doesn't mean you can't, or shouldn't do two round trips.  You might
have any number of reasons to do that.  But those reasons don't negate
the fact that it's still one extra round trip.

valerie.bauche@bull.net wrote:
> I don't understand why you say it's an extra round trip !
-- 
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
chad.lajoie@switch.ch, http://www.switch.ch