IdP3.2.1 metadata config and requireSignedRoot

Brent Putman putmanb at
Tue Dec 22 14:23:44 EST 2015

On 12/22/15 12:01 PM, Cantor, Scott wrote:
> Don't think so. I think Brent renamed it because it was ambiguously named, and wasn't really meaning what it said.

Yes, exactly.  There was some list discussion about it over the summer
(June-ish) about the lack of clarity of the name.  I think on what the
property connoted via signatures on non-root elements (answer:
nothing).  IIRC someone was actually doing that, hence the confusion.

The actual issue is here:

More information about the users mailing list