Signing metadata

[Larissa Riedel]

Hi Scott,

thanks for the help! So generating and signing the metadata on the fly is
only feasible for testing environments and in production environments the
SP and IdP Metadata should be distributed from static files?

Would you mind giving me a more in depth explanation why that gap is
necessary? Unfortunately I don't understand the reasoning.

To verify my understanding: The usual way would be that the "federation"
retrieves the static metadata of all SPs and IdPs every X hours, verifies
each of them and then creates the federation metadata file and sign it?

Larissa
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170621/76b28b26/attachment.html>