Shib IdP - Metadata Download and Java 1.7.0_85

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2015-07-23 10:58]:
> > (Unless they do something even more egregious, like resolve
> > the hostname(s) from the cert to IP addresses and match against those.
> > Surely they can't be that daft...).
> 
> That would just break the other 99.9% of the web, presumably.

I meant checking against the hostname returned from the PTR lookup.
-peter