Metadata Distribution Subcommittee of TAC

["Cantor, Scott" <>]

On 10/3/13 11:59 AM, "John Krienke" 
<>
 wrote:
>
>I would change the article from "the" to "an" InCommon metadata
>aggregate, at least in the near term. I remain of the position that
>entities in one metadata aggregate have a defined common definition and
>compliance of trust; and therefore, trust is affected when diverse
>aggregates are combined. I see good reasons to offer a ("a") combo MDA.
>I'm skeptical that we will only want 1 single ("the") MDA.

I agree that the EntitiesDescriptor named urn:mace:incommon is definitely
being used for policy right now, and we don't have a substitute yet.

But I think it's very risky to go down a road of accomodating people
misusing metadata for authorization, which I've said before. And we can
continue to maintain a nested EntitiesDescriptor by that name if we choose.

I also think we'll greatly limit interfederation by making it opt-in. So I
see this as at most an interim step.

-- Scott