Metadata requireSignedMetadata=false Behavior

[Cantor, Scott]

On 6/8/15, 10:18 AM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at internet2.edu> wrote:
>
>I was more interested in the ability to associate providers with authorities, maybe through an entity tag, the registrar tag, or even a dumb regex match on the entityID than the ability for anyone to sign anything -- see browser CA's.

That's exactly my point. If edugain worked like that, anybody consuming it would need software capable of doing that (name constraints implemented without PKIX most likely). What do you think the odds are of anybody but us supporting that?

-- Scott