RE: [saml-dev] RE: How to provide SAML assertions in RESTful services

From
Scott Cantor <>
Date
2010-06-26T17:55:46+00:00
ID
[email protected]
Thread
RE: [saml-dev] RE: How to provide SAML assertions in RESTful services
> I am always fascinated by the assertions that SOAP is too complex and all
> you need is REST so you can have simple interactions--an observation which
> remains unexamined as ever more brittle ziggurats are built atop REST.
There
> are reasons to choose each. If you have to strain as hard as one does on
> this thread, perhaps you have chosen the wrong one.

I think they're both a complete disaster when it comes to security, but I
don't see any straining except to understand the use case. That tends to be
difficult in multi-tier scenarios.

-- Scott