New relying party config

Cantor, Scott cantor.2 at osu.edu
Tue Jul 21 21:44:11 EDT 2015


On 7/21/15, 9:33 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:


>
>I thought we fixed V2 back to make it do the right thing here, I guess not.

This change I knew:

https://issues.shibboleth.net/jira/browse/SC-116

That was me applying what were the original best practice settings literally weeks before the XML Encryption collapse was reported, at which point the best practice reversed itself back to what we were originally doing by accident because that's how the universe works.

I thought we switched our defaults back. We must have decided the whole mess was beyond fixing and just left it to avoid making things worse by changing it back.

The V3 defaults are current best practice and were deliberately chosen and cross checked many times.

-- Scott



More information about the users mailing list