assertion signing defaults for IdP v3 vs v2

[Mark K. Miller]

On Fri, 19 Aug 2016, Cantor, Scott wrote:

>> I guess I'm still a bit uncertain what to make of all this, but it's
>> reassuring to know I wasn't just dreaming up the differences.
>
> The defaults we ship with are, as one would assume, the advisable 
> settings to use.

Although my first 'fix' was done the 'other direction,' I was already 
leaning towards going back this way.

>                   Any SP not accepting them is not SAML compliant and has 
> a bug.

My uncertainty is eliminated, thank you!  I will be setting the config 
back to the defaults.

> If you mean the XML Encryption issues, well, it sucks. The algorithm 
> everybody uses is flawed, and the algorithm that isn't is barely 
> supported by anybody but us.

As Clint says, "a man's got to know his limitations."  I wasn't meaning 
the XML Encryption issues.

> -- Scott

Thanks!

Max