News for hackers. Stuff that matters.
Re:SAML Is Insecure by Design by coldtea on Friday August 06, 2021 @10:21PM (#28095100)
>In the context of SAML, these values are completely arbitrary metadata without fixed meaning in the protocol itself.

Well, that's the problem though. YAGNI, KISS, and all that.

>The reason for that is that you still want to be able have an XSD to validate.

Well, you can still validate fine when you have specific fixed metadata...

There are no comments on this comment yet.