On 10/18/11 1:07 PM, "Nguyenphu, Thinh (NSN - US/Irving)"
<> wrote:
>
>- New security paper: Scott and Hall reported on new security
>paper from Germany. New security paper published from Germany, which
>identify potential SAML security risk.
No, it identifies an XML Encryption issue.
> The security paper, How to break
>XML encryption, will be presented at ACM conference CCS 2011. The paper
>documented some new techniques of attach SAML security assertion.
Only indirectly. It says nothing about SAML.
> It may
>provides some recommendation to mitigate the problem.
No, we have to provide recommendations in SAML to mitigate the issues with
XML Encryption.
-- Scott
