[mdx] Publisher authorisation

[Scott Cantor]

Josh Howlett wrote on 2009-04-27:
> Walter and I spent some time today with Chad comparing the proposed MDX
> architecture with the proposed eduGAIN service model. The only
> significant questions concerned the authentication and authorisation of
> publishers.
> 
> It wasn't clear whether this is a protocol, implementation or deployment
> issue.

Probably a combination of formalizing metadata distribution protocols and
then profiling them to define the security options to be supported.

We've never formalized the "download batch of metadata" model we actually
use all over the place, though it's obviously HTTP GET plus an XML
Signature.

-- Scott