Shibboleth Developers

["Scott Cantor" <>]

> We've been thinking in terms of phoning up the contact and confirming
> the certificate fingerprint with them.

FWIW, I do this with the CSR now, when I issue certificates (I just use a
hash), but that's what I would move to once I stop issuing them. But that's
because I don't have a web interface.

I maintain that the ACS location is a much bigger deal. If you don't care
about that (beyond just accepting what they give you if it looks sane), I
don't see why the cert matters.

-- Scott