security-use message

Subject: More S2ML configuration hassles

From: Anders Rundgren <anders.rundgren@telia.com>
To: S2ML-USE <security-use@lists.oasis-open.org>
Date: Thu, 18 Jan 2001 18:14:00 +0100

I forgot that you need to statically configure if URL-based assertion references have their
information in the URL only or in a cookie as well!

This "setting" would (of course) be automated using the previously described
scheme using challenge-reponse authentication.

Anyone who knows any more configs I have forgotten?

/Anders