SP Logout

[Tom Poage]

On 09/11/2012 02:25 PM, Cantor, Scott wrote:
>> Why is it a bad idea to use the metadata handler?
>
> For one, it provides no security unless you exchange a signing key for the
> metadata out of band. For another, it makes key rollover impossible when

Wondering if it makes sense to place a 'localhost' acl on the 
MetadataGenerator Handler in the distribution (i.e. as installed) to 
implicitly discourage people from using it as a provider--similar to the 
Status handler.

Tom.