Assurance

["Cantor, Scott" <>]

On 3/12/14, 2:10 PM, "Tom Scavo" 
<>
 wrote:
>
>I must be missing something. If there's mutual authentication (as
>Jacob described earlier), then I see how MiTM is avoided, but how does
>ordinary TLS client authentication prevent a MiTM from replaying to
>the authentic IdP?

There is mutual authentication. A TLS connection with certs on both ends
involves proof of key possession by both endpoints that leads to the
session key(s) used. The only risk is not waiting for that final state of
affairs before sending data, but that's just an application flaw.

-- Scott