Metadata requireSignedMetadata=false Behavior

[Nate Klingenstein]

That's exactly my point. If edugain worked like that, anybody consuming it would need software capable of doing that (name constraints implemented without PKIX most likely).

Strike the "most likely" and it'll reduce the fear in my heart, plz kthx.

What do you think the odds are of anybody but us supporting that?

Zilch, unless we can demonstrate the value of the model.  But that's also probably true of dynamic metadata, entity tags, and other valuable projects.  I want to build the best, most interoperable model we can conceive of.  Pioneering new technology is how the project did well, if I recall.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150608/04c33137/attachment-0001.html>