Shibboleth Developers

[Ian Young <>]

Jim Fox wrote:

> It would be a sorry state of affairs if
> Shibboleth, which started out with an idea of protecting the user, now
> goes the opposite direction and considers its users an enemy

I strongly agree, in almost all cases, and I'm certainly not advocating
any kind of change of posture.  I believe, however, that there are some
exceptions to the general rule which justify avoiding exposing attribute
values to the user *as a side effect of the protocol*.

        -- Ian