Per-Entity Metadata Working Group

[Tom Scavo <>]

On Wed, Jul 27, 2016 at 5:51 PM, Cantor, Scott 
<>
 wrote:
> On 7/27/16, 5:33 PM, 
> "
>  on behalf of Jorj Bauer" 
> <
>  on behalf of 
> >
>  wrote:
>
>>      - you've configured the endpoint to subvert TLS in some way (skip TLS
>>    validation, or install custom root certificate that pretends to be what
>>    it's not).
>
> The trust model here is not TLS, it's a signature plus a lot of other 
> semantic detail around document expiration and limiting document validity, 
> same as in the aggregate case.

If the goal is to get our arms around the larger group of clients
(Shibboleth, SSP, AD FS, Ping), then we also need to reconsider our
overall security model. TLS on the MDQ server can not be avoided if we
truly want to be all-encompassing.

Tom