Metadata requireSignedMetadata=false Behavior

[Cantor, Scott]

On 6/8/15, 4:13 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at internet2.edu> wrote:
>
>It raises the hackles on the back of my neck that a win at this point is attempting to parlay our success into a single universal trust anchor, the global PKI model.

Nobody is stopping anybody from bypassing edugain and consuming multiple trust anchors. The investment simply isn't in that direction because it's been very clear that people don't much like it. As a deployer, I don't much like it either.

Nobody is arguing edugain is the only viable way to connect communities either, nor is it a baked in assumption of the software, or that would be a problem.

-- Scott