security-services message

Subject: Re: [security-services] Action A11: XML Signature requirements forSOAPProfile

From: Rich Salz <rsalz@zolera.com>
To: Irving Reid <Irving.Reid@baltimore.com>
Date: Wed, 05 Dec 2001 12:41:13 -0500

> The <dsig:Signature> element MUST apply to all the SAML assertion elements
> in the SOAP <Header>, and all the relevant portions of the SOAP <Body>, as
> required by the application. Specific applications may require that the
> signature also apply to additional elements.

Can a message have more than one set of assertions?

If I'm communicating over a VPN or other strong transport-level secure
system, can I omit the signature?  Am I no longer compliant?
	/r$
-- 
Zolera Systems, Securing web services (XML, SOAP, Signatures,
Encryption)
http://www.zolera.com

References:
- [security-services] Action A11: XML Signature requirements for SOAPProfile
  - From: Irving Reid <Irving.Reid@baltimore.com>