assertion signing defaults for IdP v3 vs v2

[Cantor, Scott]

> I guess I'm still a bit uncertain what to make of all this, but it's
> reassuring to know I wasn't just dreaming up the differences.

The defaults we ship with are, as one would assume, the advisable settings to use. Any SP not accepting them is not SAML compliant and has a bug.

If you mean the XML Encryption issues, well, it sucks. The algorithm everybody uses is flawed, and the algorithm that isn't is barely supported by anybody but us.

-- Scott