Shibboleth Developers

["Scott Cantor" <>]

> Just another future monkey wrench - some installations 
> undoubtedly will be offloading their SSL to the 
> load-balancer. I'm not sure how that works if you want SSL 
> client-cert delivered to your system.

It doesn't. But it's still slower to sign, it's really that bad in
comparison on standard hardware, because SSL is designed to cache and reuse
its crypto and signing doesn't unless you sign with HMACs and implement some
kind of key exchange.

-- Scott