Office365 ECP broken after shib3 upgrade

[Cantor, Scott]

> I probably had less to change than you did, but for me, a chiral mixture was
> more confusing and less predictable.  If I knew the code base very well, then
> I would have felt much more comfortable following Scott's advice instead.

That is literally the exact opposite of how people should feel. If you know the code base, you can do anything you like. If not, ignore my advice and your system will not work right with something. Pretty simple.

Your guess about the cause is very likely, since the default signing options changed and that's one of the view real changes. Of course, anything that breaks as a result of that is a broken implementation, and I have no sympathy for that.

-- Scott