Windows CardSpace Team Bloggers

Interesting thing found at OSCON: Taint

2008-07-23T21:24:00Z

I attended a session this morning called " PHP Taint Tool: It Ain't a Parser " by Luke Welling. Luke introduced a tool he's working on at OmniTI that is designed to assist in sniffing out where the potential for untrusted input is handled. From Read More......(read more)

Hey, are you at OSCON?

2008-07-23T18:42:00Z

This week I'm at OSCON in Portland, OR. I like what their site says about it: "OSCON is the crossroads of all things open source, bringing together the best, brightest, and most interesting people to explore what's new, and to champion the cause Read More......(read more)

Blame it on your lying, cheating, cold dead-beating, two-timing, double-dealing mean mistreating, loving heart

2008-07-21T19:56:00Z

Ever notice how folks who blog sporadically (uh, like me!) always apologize for not blogging for a while, and then re-affirm their dedication to blogging regularly? And often, accompanying their apology, is also a reason. I was going to " Blame it Read More......(read more)

2 new great reviews for our book, and status after 1/2 year of availability

2008-07-21T08:00:00Z

It's since April that I don't write about the book (at the time we released the entire Chapter 2 on MSDN ). Last week I received notice that 2 new reviews were published: one is from the Denver Visual Studio User Group , the other is on Paul Van Brenk's blog . Both reviews are extremely nice, for which we are very grateful; I especially like the fact that in both cases the reviewers perceived our intention to deal with the problem from an holistic point of view, regardless of our affiliation with...(read more)

Issuing smartcard backed managed cards... using Zermatt

2008-07-17T21:30:00Z

We are back! I hope you had fun with the STS tutorial I posted yesterday night ; here we move a step further and examine how to equip our STS with managed card issuance logic & UI. As anticipated, this is going to be MUCH faster. If you recall, in the last post I asked you not to delete the Default.aspx page that the new web site template created for you: we are going to put our card issuance UI there. At thsi point the visual studio project should look as follows: The only new element I added...(read more)

Setting up a quick & dirty STS which supports smartcard backed managed cards... using Zermatt

2008-07-17T07:11:23Z

Just back from vacation. The tan barely started to fade, and here I am already playing with the new shiny toy :-). Did you experiment with Zermatt by now? As Kim mentions the samples (and the documentation) are an excellent way to start, and I am sure that blog posts & tutorials will soon start mushrooming here and there in the blogosphere: here I begin my humble contribution with my first technical post about Zermatt . I had *absolutely* no hesitations when deciding which scenario I should tackle...(read more)

John Fontana on Zermatt

2008-07-11T19:25:24Z

I am sure you already saw Kim's post about John Fontana's interview with Stuart , appeared on Network World . I like how John communicates the importance of this release, and how it positions it in the context of the broader picture. Recommended reading :) Also, the blogosphere is buzzing: if you toy with your favorite feeds or search engines, you'll find many sources chiming in or even already playing with Zermatt ... that's the spirit! See you next week ;-) Read More......(read more)

Getting down with Zermatt

2008-07-10T01:09:50Z

I found the samples very clear, and uncluttered with a lot of "sample decoration" Read More......(read more)

Key Piece of The Identity Puzzle

2008-07-09T23:15:24Z

Microsoft has released a beta of its most important developer tool to date Read More......(read more)

Problem between keyboard and seat

2008-07-09T22:43:17Z

Well, when you switch off all security mechanism then, yes, there are security flaws... Read More......(read more)

Announcing the Beta release of “Zermatt” Developer Identity Framework

2008-07-09T17:58:04Z

Ahh, I’ve been looking forward for this post for a looong time. We just made available for download the bits of the Beta of “Zermatt” Developer Identity Framework . “ Zermatt ” is the codename of a .NET framework that helps developers build claims-aware applications to address challenging application security requirements using a simplified application access model. Let me expand a bit on that. If you want to develop applications that take advantage of claims & identity Metasystem goodness in...(read more)

Digital Identity Podcast for MySuccessGateway

2008-07-04T07:32:17Z

Kim Cameron and I recorded a podcast on digital identity for MySuccessGateway this week at the invitation of Jim Peake of SpeechRep Consulting. Jim was a gracious, informed, and enthusiastic host during our conversation, which covered a wide range of digital identity topics including identity theft, shared secrets, privacy, Information Cards and the Information [...] Read More......(read more)

CardSpace Consumer Website

2008-07-04T05:56:31Z

Microsoft recently created a Consumer Website for CardSpace to educate end-users about Windows CardSpace and Information Cards. This complements the developer-focused information at the MSDN CardSpace site and the CardSpace Community Site. No, it’s not the kind of content targeted at regular readers of this blog – especially the short video – but then, that’s [...] Read More......(read more)

New home for Windows CardSpace on microsoft.com

2008-07-01T22:32:43Z

One year ago we had a brief wall-to-wall exchange with Keith about the need of having consumer (as non-developer) info about CardSpace. The Information Card Foundation is doing a great job at handling those info for the general concept of information card. Specifically for Windows CardSpace, I am happy to announce that we now have a consumer friendly home for Windows CardSpace ! I am especially fond of the two videos ( home & work ) from the UK crew; and big kudos to Eileen for the entire effort....(read more)

How often should you ask for a token?

2008-07-01T07:56:14Z

On the Seattle-Paris flight. I've just posted the piece about validation-authentication-authorization , and i am a bit bothered by the fact that I was unable to delve into greater details for what concerns the authoriZation part. In particular, I'd like to address one of the misunderstandings which can derive from transporting verbatim the knowledge of Kerberos & "unattended" security in general to the world of user centered identity management. Some of you claimaniacs may find the stuff below...(read more)