Metadata requireSignedMetadata=false Behavior

[Cantor, Scott]

On 6/8/15, 7:30 AM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at internet2.edu> wrote:
>
>I guess this further pushes the dynamic metadata concept even further towards a single, global oracle for any given IdP model, since it looks like it can only accept a single key.

The point of that model is a single local trust authority, not a global one. People don't want multiple anchors in a deployment. They want a local authority they trust to do the work for them.

-- Scott