metadata generation

[Jeff Masiello]

I don't know if "Various Metadata Content" added in 2.4's generator includes KeyInfo, and I bet you could do something ugly with a metadata template, but if you're even thinking about doing any of these things, it will be way easier for you to just host a real metadata file.

So I should, for the IdP, create a location that just has a build MD file and have the SP's grab that as they spin up? I guess my next question is, and I haven't read all the helpful links sent to me yet, is what, if any, are the security ramifications of allowing essentially open access to the metadata file?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140620/9bb77a0f/attachment-0001.html