[OASIS Issue Tracker] Created: (SECURITY-21) Make language on Destination attribute usage more prominent in Bindings

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

Make language on Destination attribute usage more prominent in Bindings
-----------------------------------------------------------------------

                 Key: SECURITY-21
                 URL: http://tools.oasis-open.org/issues/browse/SECURITY-21
             Project: OASIS Security Services (SAML) TC
          Issue Type: Improvement
          Components: Bindings
    Affects Versions: Version 2.0
            Reporter: Scott Cantor
            Priority: Minor


The core spec leaves usage of the Destination attribute largely up to bindings to define, but the SOAP/PAOS bindings are basically silent on it, and the HTTP bindings put MUST language into their security consideration subsections.

I think we can make it more prominent, and explicitly note that it's unspecified in the SOAP cases (so shouldn't be normatively relied on).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira