Benefits of IdPv3 re: migration to SHA-2 signing

[Nick Roy]

Hello,

It looks like migration to SHA-2 signing is a lot easier (indeed, possible) in IdPv3.  Is that true?  Is SHA-2 signing the default, or must it be proactively configured in v3?

Is there a list of intrinsic security benefits of deploying IdPv3 (aside from it being the only way to get IdP security updates in the near future)?

Thanks,

Nick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150812/1c732a3f/attachment.html>