LocalDynamicMetadataProvider at the SP

[Nate Klingenstein]

> Venturing even futher off-topic:

> The fact that DNS itself is now partially redone to work on top of
> HTTPS (DoH) I guess you could just as well use HTTPS straight away (as
> we're doing today), without putting stuff into DNS first and then
> wrapping the DNS wire format into HTTPS protocol messages.

> Avoiding having to configure a metadata oracle is a very small gain
> compared to the effort it would take to move everything we have in XML
> documents today into DNS.


I wasn't going to do it, but I agree with all you wrote, and that's why I'm looking now at entitiyID's and attributes that are resolveable URL's.  For entityID's, the meaning is pretty obvious.  For attributes, nobody's ever really dug in, AFAIK.