Issue switching InCommon from FileBacked Metadata Provider to MDQ

Nic Roy nroy at internet2.edu
Mon Dec 14 22:27:38 UTC 2020


 From a security perspective the only reason to prefer https over http 
is if you think our metadata production pipeline is vulnerable to a 
comment injection attack or something like that. I don’t think we are, 
but https might give people the “warm cozies”.

Nic

On 14 Dec 2020, at 15:05, Hucker, Taylor wrote:

> Switching to http worked perfectly for the few InCommon SPs I’ve 
> tested. Thanks for quick fix.
> Ill look into importing root into cacerts and see if I can flip back 
> to s.
>
>
>
> Thanks,
> Taylor
>
> --------------------------------
> Taylor Hucker
> Applications System Administrator
> Texas A&M University - Corpus Christi
> Taylor.Hucker at tamucc.edu<mailto:Taylor.Hucker at tamucc.edu>


> -- 
> For Consortium Member technical support, see 
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201214/ffb7b7c3/attachment.htm>


More information about the users mailing list