Metadata requireSignedMetadata=false Behavior

[Nate Klingenstein]

I don't think it has a lot of value in a world being dominated by people that think self-assertion over TLS is how the Internet should function.

A single trust anchor that's not meaningless is a win for me at this point.

It raises the hackles on the back of my neck that a win at this point is attempting to parlay our success into a single universal trust anchor, the global PKI model.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150608/33bc2de8/attachment-0001.html>