security-bindings message

Subject: http saml binding

From: Simon Godik <sgodik@crosslogix.com>
To: "'security-bindings@lists.oasis-open.org'"<security-bindings@lists.oasis-open.org>
Date: Tue, 10 Jul 2001 12:38:34 -0700

Title: http saml binding

If HTTPS is not used and the body of http message is encrypted with shared key
we should add request headers to disable caching.

HTTP 1.1
Cache-Control: no-store

HTTP 1.0
Pragma: no-cache

Simon Godik