New relying party config
Michael A Grady
mgrady at unicon.net
Tue Jul 21 21:57:43 EDT 2015
> On Jul 21, 2015, at 8:44 PM, Cantor, Scott <cantor.2 at OSU.EDU> wrote:
>
> On 7/21/15, 9:33 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
>
>>
>> I thought we fixed V2 back to make it do the right thing here, I guess not.
>
> This change I knew:
>
> https://issues.shibboleth.net/jira/browse/SC-116
>
> That was me applying what were the original best practice settings literally weeks before the XML Encryption collapse was reported, at which point the best practice reversed itself back to what we were originally doing by accident because that's how the universe works.
>
> I thought we switched our defaults back. We must have decided the whole mess was beyond fixing and just left it to avoid making things worse by changing it back.
>
> The V3 defaults are current best practice and were deliberately chosen and cross checked many times.
>
Thanks for the detailed responses, those really help clarify this config.
--
Michael A. Grady
IAM Architect, Unicon, Inc.
More information about the users
mailing list