> Would this affect the IdP code itself, or is it limited to > container-based validation? > > (i.e. is it relevant if you're fronting your container with Apache?) I know it doesn't affect encryption and I don't think it would affect signing unless PKIX path validation was involved, but I don't know for certain. -- Scott