← Prev in month ← Prev in thread

Potential Errata, HTTPS in URI Binding

From
Nick Ragouzis <>
Date
2005-06-13T06:42:55+00:00
ID
020001c56fe3$18838920$6907a8c0@bi5triy
Thread
Potential Errata, HTTPS in URI Binding
There's an apparent conflict in normative language in SAMLBind at:

Section 3.7, Line 1349: 
This binding has transport-independent aspects, but also calls 
out the use of HTTP with SSL3.0 [SSL3] or TLS 1.0 [RFC2246] as 
REQUIRED (mandatory to implement).

and

Section 3.7.5.3, Line 1407: 
Use of SSL 3.0 [SSL3] or TLS 1.0 [RFC2246] is STRONGLY RECOMMENDED 
as a means of authentication, integrity protection, and 
confidentiality.

--Nick
← Prev in month ← Prev in thread