Shibboleth Developers

["Tom Scavo" <>]

On 7/9/07, Ian Young 
<>
 wrote:
> Most deployers won't ever change the default configuration, so (in my
> opinion) it has to be secure under any assumptions about the attributes
> used, not just convenient assumptions.

Right, so if an out-of-the-box IdP pushes affiliation and nothing
else, this requirement is met.

If you're an IdP and you're concerned with pushing attributes on the
front channel, and you can't (or won't) do encryption, why not support
a push/pull combination where benign attributes are pushed and more
sensitive attributes are queried on the back channel?  If the SP needs
additional attributes, it can query.

Tom