Re: FederationTerminationNotification without signature not accepted

Radovan Semancik <[email protected]> Fri, 29 Apr 2005 09:15:03 +0200

Newsgroups	gmane.comp.sourceid.sso.user
Message-ID	<[email protected]>

[email protected] wrote:

>The spec "Liberty Protocols and Schema Specification 1.1", chapter 3.4.1,
>says: "The <FederationTerminationNotification> message SHOULD be signed."
>My interpretation is that the signature is optional. However, it seems that
>Sourceid.java version 1.1 (and also 1.2?) treats it as mandatory, right?
>Is this a bug? I'm using a liberty implementation which does not sign this
>message.
>  
>

RFC 2119:

 SHOULD   This word, or the adjective "RECOMMENDED", mean that there
   may exist valid reasons in particular circumstances to ignore a
   particular item, but the full implications must be understood and
   carefully weighed before choosing a different course.

Therefore, it is not a bug. It is a feature. :-)

-- 

                                           Radovan Semancik
                                             IT Architect
                                              nLight.sk