Skip to Content.
Sympa Menu

edugain-discuss - Re: [eduGAIN-discuss] reference for expired certificate warning

edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

Re: [eduGAIN-discuss] reference for expired certificate warning


Chronological Thread 
  • From: Nicole Harris <nicole.harris AT geant.org>
  • To: Leif Johansson <leifj AT sunet.se>
  • Cc: "edugain-discuss AT lists.geant.org" <edugain-discuss AT lists.geant.org>
  • Subject: Re: [eduGAIN-discuss] reference for expired certificate warning
  • Date: Wed, 20 Nov 2019 11:30:50 +0000
  • Accept-language: en-GB, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=geant.org; dmarc=pass action=none header.from=geant.org; dkim=pass header.d=geant.org; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9jMmVrnAAOCJDhYs1QPi3fwGgNCfnGe6B5kojVgmI8Q=; b=gFZaJW7WVdsrtS82kbPJGAHn2wcQuNb7ursMsD+paZkTEUtqnMK1or7dXLsyGYcrz2mmnBgEJOdeXRZB0Bv0lq43rOf6eOnt2G8VAKhyejmNpA9Ui8Q1C2tv6J6JgKoWL11cXzAv91dsFpESwD8kLYacPteL0a7xtU0vp2zFwRYbWytBN3pE3XhP4L48d9YdDuZmjaTkk0s+D7BDOmtS2XVTiPMZmJaWJjJBgVuIa8oqcMMwWDpNKUdQ9dKfapcD1h+bI4TBswSUlzAlV0cOMlw1DECgiX/n7wf6QTdMB/I3znkPZ916Xo7oPbKO0v3X/NFz/4lDtn4vHpNxepZD3w==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gRjAlDe9a0mHyJnLNY19Y7cqWOSe4eoPODuFdrh5mku4plyLgQHTOrkirjWBw3vvNlaHAyJ69/p3gE9Ah74VvUedn9cGvNyzBt/MAohMubGPnN3QN8MC8sHLXN2BVed1XxFE+kl0eIuT5BFIJZDvc2IvDWtSCNN0V/Xj6q4eMF1R8LrfDGf3y6RpeisszvN02KNkxiMFK4yOaISQTJN9fCO//Jw1W66FVst9cuAty7vFcejVG6ExpXXcoS97YJTu1+v0Spjy56A30EUK9VkTqCgPdi3iECXKMJkFIUpOYVU2cHseCf1ZthdCMfWvki1itI5pebXnKcWENmRJiwxg6g==
  • Authentication-results: spf=none (sender IP is ) smtp.mailfrom=nicole.harris AT geant.org;



> On 20 Nov 2019, at 10:34, Leif Johansson <leifj AT sunet.se> wrote:
>
> On 2019-11-20 09:50, Peter Schober wrote:
>> * Nick Roy <nroy AT internet2.edu> [2019-11-20 00:03]:
>>> Perhaps counterproductively adding to my rant below: ADFS is
>>> terrible, but works just well enough to lull people into the belief
>>> that it won’t screw everything up, as it invariably does, down the
>>> road. I spend at least 80% of my direct-end-user-contact time
>>> coaching people with ADFS problems. ADFS *should not be used* in the
>>> context of R&E federations, nor should other similar software. This
>>> is a real problem that I don’t know how to address in our context,
>>> but the problem is getting worse every day.
>>
>>
>
> While I tend to agree the pain is mostly localized to those that
> choose to sniff this particular sock. The organizations who run
> ADFS do that for reasons that will not be influenced by what
> REFEDS say.
>
> We may be able to get MSFT to improve things... I have had some
> chats with their new head of identity (or whatever the title is)
> Pamela Dingle who at least make the right noices. I know this is
> not the first time somebody said this too.
>
> Possibly a statement from REFEDS if wielded in a smart way may
> serve to make things a bit more concrete.

I’d be up for giving it a go. What harm could it do?

>
> Cheers Leif




Archive powered by MHonArc 2.6.19.

Top of Page