InCommon metadata support

["Cantor, Scott" <>]

> > Or run an MDQ front-end of some kind based on the aggregate, of course.
> In theory of course, an XSLT + a script to sign lots of documents, plus a 
> web
> server, is essentially what that is.
> 
> That sounds relatively simple and straightforward.

Well, it is simple because it's "local". Any reliability concerns are glossed 
over as a local matter, as is the signing key.

> What then are the complex issues that Nick stated need to be
> addressed by a working group?

That's partly what the prospective WG is waiting to hear, but I know one is 
the question of which key to use, whether to sign offline or online, and what 
the impedance problems are with the current production pipeline.

Another issue is discovery, of course, which makes the IdP consumption half 
of his much simpler to move forward on.

-- Scott