Shibboleth Developers

["Scott Cantor" <>]

> Is their submission a public or private matter at this point?  Can we
> review their profile?

TC policy is for all documents and discussion to be in public view.

The last draft is here, another is forthcoming.
http://www.oasis-open.org/committees/download.php/11323

I am trying to convince Rick to generalize the profile more, but he's stuck
trying to get a profile approved that does exactly what the customer wants
and the customer is a government agency that insists on the profile
detailing every aspect of deployment so they can save a paragraph in their
RFP, something I'm told is typical.

The compromise is a possible basic mode of operation and a more secure mode
that adds encryption and other features that I think are unnecessary to
require in the base profile because conformant implementations should
already allow the features to be enabled.

-- Scott