...
How do we know how to police this? We can say that .ac.uk goes should probably go to UK but .edu? Or a Norwegian school registered in Feide with a .acorg.uk domain. ?
Should eduGAIN maintain an ALLOW list like we do with eduroam? This is challenging. We trust federation operators to do this, but this then changes when we have different entities published. We are purely reactive on scpe scope checking.
How can we realistically change this and what checking can we request?
...