Anyonymous relying parties

[Sean McHugh]

I've recently discovered the joy of Anonymous relying parties as my Shib
IdP infrastructure has now grown.

While I find it convenient to utilize this as a way to reduce overhead in
managing SPs, I've grown more concerned about the potential for abuse:

   in theory, one could coax a user to a URL configured to send a proper
AuthNRequest to my IdP, thereby capturing attributes released by default

Am I correct here?  Is there documentation or a collection of thoughts on
other potential security concerns surrounding Anon RPs?

So, while I could potentially limit the default released attributes to
almost nothing, that would erode the benefit i've seen from utilizing
Anonymous RPs;

I'm wondering, has anyone proposed, or does there exist an implementation
of a whitelist functionality to only enable sending an AuthNResponse to a
set of
approved Issuers?  Perhaps sometime of wildcard functionality, etc.

I realize that the answer is probably:  get the metadata for the SP and
configure it in relying-party.xml  and disable Anonymous RPs ...
however, the administrative overhead involved in this is a burden for
smaller shops.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131211/2232e7e5/attachment.html