Is skipEndpointValidationWhenSigned still an issue?

Brent Putman putmanb at georgetown.edu
Wed May 25 14:28:39 EDT 2016



On 5/25/16 2:21 PM, Cantor, Scott wrote:
>
> V2 had a bug and was improperly comparing the URLs too permissively. 

Ah, right.  v2 works, v3 doesn't.  So the multitude of InCommon users
must be using v2 IdPs.

Fwiw, I found this thread:

http://shibboleth.net/pipermail/users/2015-September/024010.html

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160525/788e9078/attachment.html>


More information about the users mailing list