Possible problem with validUntil in opensaml

[Leif Johansson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/18/2012 04:28 PM, Ian Young wrote:
> 
> On 18 Jun 2012, at 15:19, Leif Johansson wrote:
> 
>> Surprising, but good answer.
> 
> In passing, if you want to be a conservative producer of metadata,
> you'll want to follow the recommendation in the spec that
> validUntil (and cacheDuration) only ever appear on the root
> element.

Quite but I hadn't exptected it to be viral like that. Loosing
a single entity due to a broken validUntil is "fine". Loosing the
entire aggregate is another matter altogether...

	Cheers leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/fO38ACgkQ8Jx8FtbMZndDSwCdGD7MS8WEJ7mFld9meXcQFAVt
Xa0An1EcnFDtDZcHKQBV94cammIlCwuh
=yLYf
-----END PGP SIGNATURE-----