2 ms·
Cryptographically authenticating SAML assertions is the most perilous part of implementing SAML The incredible overengineering of the XML signature specificati
by userbinator 2y ago
Cryptographically authenticating SAML assertions is the most perilous part of implementing SAML
The incredible overengineering of the XML signature specification is certainly to blame for this recent SAML verification vulnerability (from the same site): https://news.ycombinator.com/item?id=41586031 https://news.ycombinator.com/item?id=41586031