OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: RE: [security-services] BPP vs BAP for SAML 1.1

John -
I am sure you have already thought about this. But just in case, there are
two salient pro/con for BPP vs. BAP:
1. BAP has the advantage of being more compact on the Browser (i.e., only
the artifact passes through the browser),
2. BPP has the advantage that it is "self-confirming" and does not require a
(SOAP) connection from the assertion consumer to an assertion producer.

I personally think that (2) outweighs (1), but that's another matter.


Jahan Moreh
Chief Security Architect

-----Original Message-----
From: John Hughes [mailto:john.hughes@entegrity.com]
Sent: Tuesday, March 23, 2004 1:12 AM
To: Security-Services
Subject: [security-services] BPP vs BAP for SAML 1.1

Its just crossed my mind that it might be good to have a small section in
the SAML 1.1 Technical Overview on the pros/cons using BAP vs BPP ( and vice
versa).  I can think of some - but welcome other input.


To unsubscribe from this mailing list (and be removed from the roster of the
OASIS TC), go to

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]