Shibboleth Developers

[Jim Fox <>]

> > I'd say we can deliver the modulus only, and skip the exponent altogether.
>
> I think we should deliver something that can be processed by tools and turned 
> into a public key, so I think it should be DER (encoded).

Why?  What's the app going to do with this public key? We don't deliver to
apps the credentials used by IdPs when they authnticate.  Seems to me that
this credential is nothing but a validation that the other information comes
from the same user as used the site before.  I suggest that a 128 bit
hash of the public key ought to be enough information.  It's an identifier
and nothing more.

Jim