OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Proposed Errata: HTTPS in URI Binding not REQUIRED


This is proposed errata for SAMLBind:

The para at Section 3.7 (SAML URI Binding), Line 1349: 


CURRENT:
Like SOAP, URI resolution can occur over multiple 
underlying transports. This binding has transport-
independent aspects, but also calls out the use of 
HTTP with SSL3.0 [SSL3] or TLS 1.0 [RFC2246] as 
REQUIRED (mandatory to implement).


REPLACEMENT:
Like SOAP, URI resolution can occur over multiple
underlying transports. This binding has protocol-
independent aspects, but also calls out as mandatory
the implementation of HTTP URIs.

--Nick



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]