Adding option to suppress NotBefore condition in assertions?

[Michael A Grady]

On Dec 25, 2012, at 4:13 PM, Tom Scavo wrote:

> On Mon, Dec 24, 2012 at 5:58 PM, Michael A Grady <mgrady at unicon.net> wrote:
>> This is one last attempt to see if there is any interest in the Shib community to have a by-relying-party option to suppress sending the NotBefore condition on assertions sent to an SP from the Shib IdP.
>> 
>> Unicon is prepared to do that work using the same pool of Cooperative Support program hours that I referenced in the earlier post about the Login Page design. But my last attempt to see if there was any interest or need for such an option within the Shibboleth community did not yield any "takers". This is one "last call" to see if there is any such interest/need, before we abandon considering doing that work. (Wouldn't be a very useful contribution to the community if no one is going to use/need it.)
> 
> +1
> 
> but I don't really see why any kind of consensus is necessary in this
> case. If Unicon is willing to do the work, and the Project is willing
> to incorporate the patch, just do it. As long as it's off by default,
> what could be the harm?
> 

That's true, and you're right that as long as we did it in a way that fit in smoothly with the Shib 2.x IdP, we could just do it and contribute it. The hesitation to work on it comes more from the "best use of time that contributes something useful to the community" perspective. I.e. there is a finite pool of hours we can contribute in the next several months, and if there is a better use of those hours in terms of the value delivered, then it makes sense to focus on whatever that is versus an option that doesn't get used by anyone but ourselves.

> I don't recall the previous discussion. There aren't any security
> concerns, are there? I'm assuming that's the case.

Not that I'm aware of or that have surfaced in any previous discussion.

> 
> Tom
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net


--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.