> I guess Shib is cacheing the HTTP headers (or at least "Last > Modified" and/or ETag) internally to use HTTP conditional GET? Exactly that. see under 'File Backed HTTP Metadata Provider' in https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider The SP is much the same.