security-services message

Subject: Re: Note on Digital Signing in SAML

From: Evan Prodromou <eprodromou@securant.com>
To: security-services@lists.oasis-open.org
Date: Fri, 29 Jun 2001 14:38:37 -0700

>>>>> "MP" == Mishra, Prateek <pmishra@netegrity.com> writes:

    MP> Evan, Does this not fall within the "security considerations"
    MP> charter?

Prateek,

I guess my understanding of "security considerations" was the
evaluation of, and suggested mitigations for, potential attacks on
SAML architecture and bindings. 

    MP> A. Role of Digital Signatures in SAML

Thank you! That definitely gets the ball rolling.

~ESP

-- 
Evan Prodromou, Senior Architect        eprodromou@securant.com
Securant Technologies, Inc.             415-856-9551

References:
- Note on Digital Signing in SAML (was RE: The XML Security Gap (wa sRe: XML Encryption Working Draft))
  - From: "Mishra, Prateek" <pmishra@netegrity.com>