[mdx] MDQ draft and SHA-1

Nick Roy nroy at internet2.edu
Thu Jan 16 12:56:12 PST 2020



On 14 Jan 2020, at 13:48, Cantor, Scott wrote:

> On 1/13/20, 10:55 AM, "mdx on behalf of Ian Young" <mdx-bounces at lists.iay.org.uk on behalf of ian at iay.org.uk> wrote:
>
>> Section 4.2 "Use of SHA-1 in Transformed Identifiers" (ca. line 311) has been largely rewritten.
>
> That looks fine to me.
>
> I can certainly raise the spectre of whether SAML needs to evolve on the next TC call, but I don't know that there's any real appetite to do anything about it.
>

Seems like it’s worth discussing on the next TC call. Also the InCommon TAC is recommending we try to fold the errata into a SAML v2.1 if possible. But the SHA1 artifact resolution change would probably be big enough that it could go beyond a point release…

Nick

> -- Scott
>
>
>
> _______________________________________________
> mdx mailing list
> mdx at lists.iay.org.uk
> http://lists.iay.org.uk/listinfo.cgi/mdx-iay.org.uk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 512 bytes
Desc: OpenPGP digital signature
URL: <http://lists.iay.org.uk/pipermail/mdx-iay.org.uk/attachments/20200116/e142a340/attachment.sig>


More information about the mdx mailing list