Shibboleth Developers

[Scott Cantor <>]

I should clarify that what I'm trying to do is *minimize* the changes needed 
to the code to get 1.0 out the door, while maximizing
the ability to handle the types of scenarios that I've thought about so far.

The goal here isn't to throw some last minute twist into the design, but to 
figure out how to accommodate some non-trivial use cases
w/o doing that.

What I discovered in my OpenSSL reading was that I could drive this stuff off 
of an XML file instead of the usual CA file, and so
I'm just trying to figure out the way to do it that increases the bang for 
the coding buck.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--