An open discussion list for topics related to the eduGAIN interfederation service.

[Ian Young <ian AT iay.org.uk>]

On 7 Jul 2014, at 13:04, Nicole Harris <harris AT terena.org> wrote:

> I think that the correct action here is to remind the SP
> http://scitation.aip.org/ that it should not consume the metadata tagged
> as "eduGAIN" at this point in time.

Whether I agree with that will depend on what you mean by "consume". We don't 
offer them an alternative to the production aggregate, so if they use the 
production aggregate as recommended they are "consuming" eduGAIN metadata. 
What is problematic is what they are doing with it, I think.

> http://scitation.aip.org/ are being lazy overall with discovery - for
> example all the UK colleges appear in their dropdown and I very much
> doubt many of them subscribe to AIP publishing.  So I really think this
> is lazy discovery not a symptom of how the UK are publishing.

Agreed.

> It is also important to remember that many federations are doing
> additional filtering of downstream metadata so reciprocity can never be
> guaranteed.

Good point. The UKf, for example, does not republish entity metadata 
containing embedded RSA public keys of less than 2048 bits.

> Overall though I think that is great that we are starting to see these
> problems as it means that eduGAIN metadata is really out there in the
> wild.

Thanks for the upbeat view of this ;-)

        -- Ian

Attachment: smime.p7s
Description: S/MIME cryptographic signature