include SignatureValidation filter with FileBackedHTTPMetadataProvider
Cantor, Scott
cantor.2 at osu.edu
Tue Dec 19 12:57:28 EST 2017
> If the metadata is NOT signed, do not use FileBackedHTTPMetadataProvider.
>
> Why? Because if you do, there's no security upon startup.
Except that is *not* true.
-- Scott
More information about the dev
mailing list