metadata generation

[Jeff Masiello]

Ah ok. Yeah I meant open read

To clarify, open read access is fine in most environments.  Open write access is really bad.

On Jun 20, 2014, at 12:59 PM, Nate Klingenstein <ndk at internet2.edu<mailto:ndk at internet2.edu>>
 wrote:


I guess my next question is, and I haven't read all the helpful links sent to me yet, is what, if any, are the security ramifications of allowing essentially open access to the metadata file?

"Open access"?  Really bad.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140620/ae0e61d8/attachment.html