Metadata requireSignedMetadata=false Behavior

[Nate Klingenstein]

This is the most interesting thing that you wrote, to me.  I wonder whether this is going to create questions for future use cases where we're trying to support multiple signatures.  I don't know how eduGAIN works, for example, but I could imagine deployments taking this path.

One more question along these lines.  What happens with the:

https://wiki.shibboleth.net/confluence/display/IDP30/DynamicHTTPMetadataProvider

I guess this further pushes the dynamic metadata concept even further towards a single, global oracle for any given IdP model, since it looks like it can only accept a single key.  I was unable to verify this, though, since it doesn't look like certificateFile is documented on that page, or whether you can have multiple.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150608/1794c9ef/attachment.html>