Artifact metadata resolution in java OpenSAML and FU question on using the MDQ

[Cantor, Scott]

On 10/12/17, 9:02 AM, "dev on behalf of Alan Buxey" <dev-bounces at shibboleth.net on behalf of alan.buxey at myunidays.com> wrote:

> though given the deprecation of SHA1 in other systems I would say a
> SHA2 hash (using SHA1 these days is like using MD5 a couple of years
> back - time to move on :) )

There is no way to move on, the artifact types are fixed length. It's also not really important, the attacks against SHA-1 don't impact how this is being used in any significant sense.

-- Scott