An open discussion list for topics related to the eduGAIN interfederation service.

[Maja Wolniewicz <mgw AT umk.pl>]

Wiadomość napisana przez Peter Schober <peter.schober AT univie.ac.at> w dniu 15.07.2016, o godz. 17:24:

* Kristof Bajnok <bajnokk AT niif.hu> [2016-07-15 16:54]:

And there should be some eduGAIN rules regarding the domains, yes.

So we'll need to pick up the discussion from the thread
"New rule in the validator" from December 2015, and add ".local" DNS
domains to the list of candidates for filtering, besides whitelisting
URI schemes.

I fully agree with Kristof that the OT shouldn't implement any
filtering the eSG hasn't previously decided upon/approved.
(Which may be why the filtering discussed in that thread never
happended? Or maybe was implemented?)

It was implemented.

The eduGAIN validator raises error for entities which name do not start with one of:

http://

https://

urn:

A host part after http:// or https:// isn’t checked now.

The metadata validation is based on the eduGAIN validator, so a federation with an entity not following required schema is rejected (and the last successfully validated feed is used until the validUntil is correct)

Maja

-peter

-- 
Maja Gorecka-Wolniewicz            mgw AT umk.pl
Uczelniane Centrum                     Information & Communication
Informatyczne                               Technology Centre
Uniwersytet Mikolaja Kopernika   Nicolaus Copernicus University
Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574

Attachment: smime.p7s
Description: S/MIME cryptographic signature