Distributed attribute-resolver.

[Ian Young]

On 25 Sep 2014, at 14:42, Cantor, Scott <cantor.2 at osu.edu> wrote:

>> Then of course I need to push that configuration into the installer.  Is
>> it
>> reasonable to just default it to the DNS name, or do we need to prompt the
>> used? It rather feels as though this needs to be prompted for.
> 
> I think you could get away with the second level DNS name.

A propos of nothing, and because there is a lot of caffeine in the flu pills I took an hour ago, obviously "second level" with "example.com" is fine but it's more problematic with "example.ac.uk". The good news is that there is actually a public suffix list implementation in Guava so you can peel it back to the appropriate level in both cases without hard coding "second level".

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5943 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20140925/34c85443/attachment.bin