RE: Updated IdP to new spec.

> How many keys can we have in a single profile, so that it will not look 
> like a DoS attack?

Anything fewer than about a hundred would strike me as needlessly limiting.

Extracting the modulus and exponent from a key and then iterating the cert:modulus and cert:exponent triples in the profile and comparing them shouldn’t really be a slow operation (not to the point of ~30 keys timing out) — how are you going about it?

M.



http://www.bbc.co.uk/
This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in error, please delete it from your system.
Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately.
Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.