Seeking feedback on default encryption algorithm for V4

[Peter Schober]

* Chris Phillips <Chris.Phillips at canarie.ca> [2020-02-07 20:52]:
> Rather than a toggle of on/off [...]

Well, I'm assuming deployers can both change that property as desired
(which would be mentioned in the release notes, I'm guessing) as well
as override that per relying party, for SPs lacking the metadata
extension? 

With both options provided I guess this would be managable, though I
fully expect stuff to break given that our local community seems to
value "never change a running system" much higher than taking security
seriously. (They're not alone in that, of course, given how the rest
of the world exchanges metadata, with no signatures and no expiration.)

-peter