persistence of user consent

[Ian Young]

> On 19 Feb 2015, at 15:47, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> Probably. The defaults probably need tweaking, because keeping only three 
> keys but changing them daily obviously won't work too well, but that said, 
> the whole blob of data gets re-sealed with the latest key every time it 
> has to change a record, so it would take 3-4 days with no activity for 
> that to be the cause.

Is the consent information stored in a cookie per SP, or in one cookie covering all SPs? That would obviously change the meaning of the "3-4 days with no activity" a fair bit.

    -- Ian




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20150219/a5aa374b/attachment.bin