Use of metadata signature filter

[Cantor, Scott]

> Well, I've been bitten one too many times by partners who give me bad
> metadata files. I don't really care if they give me garbage values per se,
> but I definitely don't want Shib to fail because they give me garbage xml.
> My phone is the one that rings at that point, not theirs.

I'm not aware of any outstanding issues with that, unless it's a batch of multiple entities with of course one bad entity breaking the batch and preventing it from loading. But the old metadata is preserved and AFAIK that's true now across restarts and in pretty much all cases.

Where you can get problems is downloading a file and overwriting your copy, and if that file is then bad, you have problems. You need real validation code behind any separate maintainer script to prevent that.

I totally agree with your point, I'm just saying we've spent massive amounts of time working to prevent that problem.

-- Scott