default IdP metadata for Shib IdP V3

[Cantor, Scott]

On 1/20/16, 10:31 AM, "users on behalf of Tom Scavo" <users-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:



>I still don't see it, so I will press for an answer, please bear with
>me. I'm not asking about key rollover.

You asked why they're different, and aside from "every text says they should be", one of the reasons was to make changing them independently simpler and easier to explain.

> I'm specifically asking about key compromise. I understand how a TLS key can be compromised in
>multiple ways (think: HeartBleed) but I don't understand the distinction you're making between XML Signature and XML Encryption. Why do I need separate keys for each?

I'm not a cryptography expert, but there has never been any argument I've seen suggesting that's a misguided idea. Every scheme and best practice out there urges separation of keys.

If the reasons for that aren't really about a technical risk and more about just the differing implications of compromise in the two cases, then it all just falls under "key management".

-- Scott