FederationTerminationNotification without signature not accepted
[email protected] Thu, 28 Apr 2005 17:30:26 +0000
| Newsgroups | gmane.comp.sourceid.sso.user |
|---|---|
| Message-ID | <[email protected]> |
Hi The spec "Liberty Protocols and Schema Specification 1.1", chapter 3.4.1, says: "The <FederationTerminationNotification> message SHOULD be signed." My interpretation is that the signature is optional. However, it seems th= at Sourceid.java version 1.1 (and also 1.2?) treats it as mandatory, right? Is this a bug? I'm using a liberty implementation which does not sign thi= s message. regards, Peter