Shibboleth Developers

["Scott Cantor" <>]

> One thing seems clear, however. If every <md:KeyDescriptor> element in
> metadata had an explicit 'use' attribute, it would be much easier for
> everybody. So, as Ian observed, our tools need to support this (which
> is probably the most important lesson I've learned from all of this).

It's not that they all should have the attribute. That bloats the file
rather badly. The power comes from controlling the attribute, period, so
that the keys can be manipulated as needed. But that takes understanding,
and is prone to mistakes. That's what's more complicated about it.

-- Scott