Subject Re: VO challenges - article
From Tom Scavo <trscavo@xxxxxxxxxxxxx>
Date Tue, 27 Oct 2015 18:38:38 -0400

On Tue, Oct 27, 2015 at 3:24 PM, Warren Anderson <wganderson12@xxxxxxxxx> wrote:
> So, is there something we can have the R&S SPs do to mitigate the perceived risk?

Yes, I think there is. The current model forces the IdP operator to
assume the risk but clearly the SP owner is the benefactor of
attribute release. It seems to me that the SP owner must *explicitly*
accept the risk of attribute release. That requires a different model,
I'm afraid.