[mdx] Publisher authorisation

[Thomas Lenggenhager]

Josh Howlett wrote:
> (In the context of eduGAIN, we need to worry about how we bind the
> signing key to the known/unknown publisher, but that's clearly an
> implementation consideration and out-of-scope here.)
> 
> However, I guess this might be complicated if we think we choose to be
> concerned about provenance where we have a chain of aggregators. If we
> decide to care about this, then this might have profiling and/or
> protocol considerations.

That info could go as signed tag(s) into the metadata. As you say, the 
details would then need a profile.

Thomas

-- 
SWITCH
Serving Swiss Universities
--------------------------
Thomas Lenggenhager
P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 1505  direct +41 44 268 1541
http://www.switch.ch