Re: [security-services] SAML2.0 in the news (SolarWinds hack)

["Cantor, Scott" <cantor.2@osu.edu>]

On 1/14/21, 3:43 AM, "security-services@lists.oasis-open.org on behalf of Leif Johansson" <security-services@lists.oasis-open.org on behalf of leifj@sunet.se> wrote:

>    Maybe the SSTC should "put out a statement" (T-shirt?9 saying "its about the keys stupid"

I'd probably go with "sorry artifacts sucked", but I probably still wouldn't have (and wouldn't now) deploy a back channel myself.

-- Scott