<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 11/12/16 2:45 PM, Tom Scavo wrote:<br>
</div>
<blockquote
cite="mid:CAEtu=dNYr=5Sot-Yr5Q3oWs6H7dE0qFxyr6pQDoNCkU58tzG7A@mail.gmail.com"
type="cite">
<pre wrap="">
</pre>
<pre wrap="">
Is there an option to bypass signature verification on the backup file
(as there is in the SP)? </pre>
</blockquote>
<br>
No, because there's currently really no good way to do it. The
signature validation filter is just buried in the filter chain and
there's no easy way to skip it directly from the "outside". The
cleanest way will be to change the MetadataFilter API to introduce a
new MetadataFilterContext or something that is passed in on the
filter's method call, to effectively parameterize filter
operations. We'll probably do that, but it's a 4.0.0 thing.<br>
<br>
<blockquote
cite="mid:CAEtu=dNYr=5Sot-Yr5Q3oWs6H7dE0qFxyr6pQDoNCkU58tzG7A@mail.gmail.com"
type="cite">
<pre wrap="">If no, do you think such an option would have
a significant effect on IdP startup time?
</pre>
</blockquote>
<br>
Honestly, I don't know. It obviously will have some effect, but I
really don't know for sure how much it is, relative say to the HTTP
fetch cost. I suspect the saving will be much less than the HTTP
fetch cost, but we'll see. That's actually something for which we
ought to look at adding new Metrics instrumentation: filtering time,
and maybe specifically signature verification time.<br>
<br>
</body>
</html>