Is there a checklist for the metadata file?

[Peter Schober]

* Tom Scavo <trscavo at gmail.com> [2015-03-30 14:44]:
> > I don't use InCommon for on-campus systems, and I don't supply the
> metadata for our IdP to them with it. I host the metadata file, but
> I also sign it every morning, and it expires every few days, and the
> (Shibboleth) SPs check all of that when they load it every few
> hours.
> 
> Hopefully, soon, you (and others) won't have to do that any more:
> 
> http://mdq-beta.incommon.org/global/entities/urn%3Amace%3Aincommon%3Aosu.edu

You'd still have to point them elsewhere and explain to them why they
should trust any output from that, same as with an aggregate that gets
filtered after downloading (whether it's your own or a federation's).

I see MDQuery only as an optimization for network/cpu/memory usage of
consuming systems. It changes nothing wrt the trust model.
-peter