Home » Archive

Articles tagged with: cardspace

Cool & Future Tech, Digital Identity, Things I've Made »

[9 Apr 2008 | No Comment | ]

I’m a bit late with this one….Shamelessly copied from Axel’s blog [LINK]
April 7, 2008
Showcasing How Users Can Control their Identity Online, Industry’s Largest Identity Interoperability Demonstration Scheduled for RSA 2008
Fifty-seven member open source identity group to test and demonstrate interoperability between user-centric identity protocols and providers
SAN FRANCISCO (RSA Conference 2008) – April 7, 2008 – Open Source Identity Systems (OSIS) will conduct the largest user-centric identity interoperability test and demonstration at the 2008 RSA Conference, April 7-11 at the Moscone Center in San Francisco. The 33 member …

Digital Identity »

[1 Apr 2008 | One Comment | ]

Exciting times indeed in the world of Digital Identity. Huh? What the heck?
What’s going on? The internet has a crappy way of managing your personal information. We’re trying to fix that.
Why should I care? Right now you’re at quite a high risk of having your identity stolen, losing control of your personal information, of being phished or losing track of what personal information is stored where. See my previous post on Identity Fragmentation [LINK].
So what are you talking about now? RSA is happening NEXT WEEK! (7-11th April) …

Digital Identity »

[25 Mar 2008 | No Comment | ]

A while back [LINK] I was lucky enough to get a copy of "Understanding Windows Cardspace" by Vittorio, Garrett and Caleb[LINK]. I’ve finally been able to give this the time it deserves.
The Foreword is by Identity luminary (and friend) Kim Cameron and if I’m keeping it real, rather than describe the book’s contents, I wish he’d shared more thoughts around the problem space, the approach to the solution and the roadmap BEYOND cardspace.  Here’s Kim’s take on the book [LINK].
The book itself is an easy read. Not a tome …

Digital Identity »

[11 Feb 2008 | No Comment | ]

OSIS Interop testing has kicked off with the launch of the results Wiki [http://
As mentioned in an earlier post, my Cardspace Relying Party Test Harness[LINK] as well as my Identity Provider [LINK] are in the testing this year. I get a big kick out of seeing the interoperability work between my hacked-together test harness and the other implementations out there.
Results are being gathered in the following matrix and will likely be reviewed at RSA 2008 this year.
After some initial testing it seems my RP/IdP works reasonably …

Cool & Future Tech, What I Read »

[31 Jan 2008 | One Comment | ]

Addison Wesley is shipping me a free copy of "Understanding Windows Cardspace" by Vittorio, Garret and Caleb. What could be better than THAT???
Really looking forward to this one and hoping it will answer some of the more obscure questions I’ve encountered in my Cardspace Explorations.
In related news, my Cardspace STS and Managed Card Test Harness [LINK] is in the mix of RPs and IdPs currently being tested as part of the latest OSIS interop. Many thanks to Mike Jones [LINK] for including me on this. The list of …

Digital Identity, Things I've Made »

[11 Dec 2007 | One Comment | ]

Cardspace can currently be launched from a web page through the use of the object tag, html form and optionally some javascript.  This approach requires rendering an HTML page and some form of user interaction before the Cardspace ID selector is launched.
This works for the typical case of logging into a website, establishing a session and accessing protected web pages.
But what if you just want to protect a file. Or an XML resource like an RSS feed?
In this post I’ll propose an extension which would allow Cardspace …

Digital Identity »

[13 Nov 2007 | 5 Comments | ]

A few weeks ago I joined Facebook (after much resistence). Facebook sucks you in, making it so easy to give up bits of information about yourself, many times without even realizing it. It occurred to me that I’m leaving pieces of my identity everywhere.
Last night I took a stab at listing out the various entities that know me, regardless of how they know me. The list is overwhelming. It quickly became apparent that to develop a comprehensive list was not feasible. What I ended up with was a good …

Digital Identity, Things I've Made »

[4 Nov 2007 | 6 Comments | ]

Tonight I launched a simple CardSpace Managed Card Generator and Test Harness. It lets you generate a managed card, with whatever claims you’d like and then generate a test harness form for that card.
The card can then be used to obtain claims from a Simple Security Token Service. Lastly, these claims can be consumed and parsed out to complete the end to end process.
This might seem like a trivial exercise but I have not come across any other publicly available service that demonstrates the end to end flow …

Digital Identity »

[1 Nov 2007 | 3 Comments | ]

Continuing the discussion on DisplayTokens [LINK] :
A number of you have emailed me directly and some have commented publicly with some thoughtful insight and I thank you for that. Vittorio has written a very thoughtful and detailed response on his own blog [LINK].
Going back to my original question which was "Does the DisplayToken violate the First Law of Identity?" I am not convinced it does. What I think I am discovering is that the First Law of Identity is not necessarily enforced.
In Kim’s words[LINK]
"Those of us who …

Digital Identity »

[24 Sep 2007 | No Comment | ]

Digital ID World [LINK] is going on currently in San Francisco. The timing is no surprise but I’m excited to read that Microsoft has announced integration of Cardspace with Windows Live [LINK].
I have been playing with Cardspace, .NET 3.x and the ID meta system for some time now. Probably 18months. In March of this year I got the chance to demo an interesting proof of concept with this technology at the IDA conference in Redmond. That was fun and is one of the last memories I have of life …