[mdx] MDQ draft and SHA-1

[Nick Roy]

On 17 Jan 2020, at 7:36, Cantor, Scott wrote:

> On 1/16/20, 3:56 PM, "Nick Roy" <nroy at internet2.edu> wrote:
>
>> Seems like it’s worth discussing on the next TC call. Also the InCommon TAC is recommending we try to fold the errata
>> into a SAML v2.1 if possible.
>
> Internet2 would have to donate the resources to make that happen, there just isn't anybody to do the work.

That’s presuming no one else wants to do it. I’m not saying it’s likely that anyone else wants to do it, I’m just proposing we bring it up on the call.

>
>> But the SHA1 artifact resolution change would probably be big enough that it could go beyond a point release…
>
> It wouldn't be a change, it would be a new artifact type, and since nobody would support it...

I’m also happy with just ignoring this until someone makes a stink about it. Could be never.

Nick

>
> -- Scott
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 512 bytes
Desc: OpenPGP digital signature
URL: <http://lists.iay.org.uk/pipermail/mdx-iay.org.uk/attachments/20200117/a5b3a0c4/attachment.sig>