Shibboleth FileBackedHTTPMetadataProvider

[Cantor, Scott]

> Basically, I'm trying to understand the strategy around the backing
> file. I assume the backing file is consulted if the HTTP request for
> metadata fails. Is the startup strategy different than the normal
> refresh strategy?

A refresh would never, AFAIK, consult the backing file.

> If signature verification fails, is the backing file consulted or does
> the process stop dead in its tracks?

Stops dead. Filters run after an instance is in hand to filter.

-- Scott