Trail of Bits
@trailofbits
A 2012 USENIX paper brought XML Signature Wrapping (XSW) attacks against SAML into the mainstream. SAML has repeatedly shown that complexity is the antithesis of security. Matt Schwager names 5 protocol design flaws enabling SAML's insecurity: blog.trailofbits.com/2026/09/21/sam…
blog.trailofbits.comSAML: A fractal of bad design
· Edited
6 40