Shibboleth.DEPRECATION : MetadataGenerator handler

Peter Schober peter.schober at univie.ac.at
Mon Dec 6 14:06:01 UTC 2021


* Cantor, Scott <cantor.2 at osu.edu> [2021-12-06 14:31]:
> I do anticipate that having some means of getting some of the
> information out such as algorithm support may be added in a
> different form.

Thanks. To the extent that the new SP will be accepted by deployers[1]
that would make at least some of our lifes quite a bit easier.
(Others will likely report the sharing the supported crypto algorithms
as a security "vulnerability". ;))
Best,
-peter

[1] Which is of course impossible to predict. Maybe the continued
pressure to Containerize All The Things will make a Java-based shibd
less of an issue, with deployers "just" loading an image with that
part of the SP and a matching JVM. It would of course help if
Java-shibd then sufficiently scaled to connect via TCP sockets,
possibly protected with [m]TLS?


More information about the users mailing list