encrypting saml protocol messages

Hi,

 

I'm trying to implement Web SSO profile and wondering why  SAML 2.0 did not define the encryption of SAML procotol messages (request/response), but only encryption of the SAML assertion and some sub elements.
 Can any one shed some light on this?

 

Thanks,

Gang