jetty

[Ian Young]

> On 2021-03-17, at 20:43, Donald Lohr <lohrda at jmu.edu> wrote:
> 
> Hypothetically speaking, is there a need for the jetty service used by a Shibboleth IdP to allow tls1 or tls1.1 ?


It's going to end up being a question of what you need to be able to talk to the IdP with: browsers (for front channel) and SP implementations (if you need the back channel).

If all of the browsers your users need to use can use modern TLS, then you're probably in the clear.

    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210317/f9949b33/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3883 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20210317/f9949b33/attachment.p7s>