Shibboleth without Back Channel?

[Nate Klingenstein]

> CAS uses port 443 and generally uses commercial TLS (or nothing) as a trust mechanism.

I won't go into details, but back-channel queries over 443 still caused a rather spectacular incident that was a challenge to track down.  The replication itself has actually not caused us problems.

> I don't know if it's been filed as a request. Marvin would tell us what is or isn't going to make a release once a timeline is being discussed. If it's not in the issue tracker then it's certainly not being discussed.

I would be glad to file an issue if it’s a realistic request in the intermediate term.  Will wait on confirmation from Marvin regarding prospects and workload.