SAMLv2: HTTP POST ‘NoXMLdsig’ Binding
From various discussions held with various folks, e.g. on the IDWorkshop mailing list (aka “Identity Gang“), it has become apparent that the major sticking point w.r.t. SAMLv2 adoption in some...
View ArticleSAMLv2: HTTP Post-SimpleSign Binding
Scott Cantor and I have revised the SAML HTTP POST-NoXMLdsig binding, which I’d posted about a while back. We’ve renamed the binding to: “HTTP POST-SimpleSign” The revised spec is here:...
View ArticleRev -02 of HTTP Post-SimpleSign Binding
Scott Cantor and I have updated the SAML HTTP POST-SimpleSign binding, which I’d posted about earlier in September. The revised spec is here: draft-hodges-saml-binding-simplesign-02.pdf. We enhanced...
View ArticleLatest revisions of SAML-LSSO and SimpleSign specs
Scott and I have updated the SAML-LSSO (Lightweight Web Browser Single-SignOn) profile and SimpleSign binding specs. Together they specify a lightweight SAML profile whose “security knob” can be dialed...
View ArticleLatest Revision of SAML HTTP POST-SimpleSign Binding Spec
The latest revision of the SAML HTTP POST-SimpleSign Binding Spec is here… draft-sstc-saml-binding-simplesign-02 http://www.oasis-open.org/committees/download.php...
View ArticleLatest revisions of SAML-lSSO and SAML OpenID Profile
I’ve updated the SAML-lSSO and SAML OpenID Profile specs just to bring them up-to-date with the latest revisions of various SAML and OpenID specs and to fix minor editorial issues. The SAML-lSSO spec...
View ArticleNew rev of SIP-SAML profile
There’s a new revision of the SIP-SAML profile spec.. SIP SAML Profile and Binding http://www.ietf.org/internet-drafts/draft-ietf-sip-saml-05.txt The key changes in this revision are that we’re aiming...
View ArticleHTTP Strict Transport Security (HSTS) Approved as Proposed Standard RFC
As I’d noted back in July, the draft HSTS spec was in IETF-wide last call, from which we exited in August with various helpful comments. We applied summore elbow grease to the ol’spec and shipped it to...
View ArticleWeb Authentication Working Draft rev 5 (WD-05)
Web Authentication Working Draft rev 5 (WD-05) is officially published here: https://www.w3.org/TR/2017/WD-webauthn-20170505/ The latest official WebAuthn spec release is always available here:...
View Article
