Cardspace Community Bloggers

Nat Sakimura on OpenID and XRI

Nat Sakimura, who is quietly implementing real user-centric identity solutions in the Japanese market while many others are still talking about them, has posted his concise reasoning why XRI absract identifiers are the the only really safe identifiers to use with OpenID. The whole question of the differences between abstract and concrete identifiers, currently being explored [...] Read More...

Posted Tuesday, September 23, 2008 1:25 PM from Equals Drummond | 1 Comments

Filed under: OpenID, XRI, Practical I-Names, abstract identifiers, concrete identifiers

XRI in a Nutshell

Someday I’m going to write a book about primary challenge with disruptive technologies: they are always starved for resources. In fact, you could argue this chicken-or-egg problem is what defines a disruptive technology: it can’t attract enough development resources until it has proven its value, and it can’t prove its value until it has attracted [...] Read More...

Posted Saturday, September 06, 2008 5:00 PM from Equals Drummond | 1 Comments

Filed under: OpenID, XRI, xrds, Practical I-Names, xri for openid, xri guide, xri tutorial

Eve Finds Another Intersection

I’m going to start referring to her as the Venn Queen. Eve Maler has done another Venn diagram, this time to show the relationship of whole areas of the “user-centric” sphere of activities. Going into Digital ID World next week, I’ll use this to help orient conversations around why there needs to be a simple, [...] Read More...

Posted Thursday, September 04, 2008 7:51 PM from Equals Drummond | 1 Comments

Filed under: OpenID, user-centric, Information Cards, privacy, General, XDI, I-Cards, Social Web, VRM, Data Portability, r-cards, Relationship cards, Eve Maler, Venn diagrams

VeriSign's OpenID Provider Gets an Upgrade

Pretty cool to see VeriSign's OpenID Provider continue to get new features and a new look. From TechCrunch it sounds like one of the big features is password management for websites that don't yet support OpenID. Cool! Glad to see the team there continue to push the PIP forward. One click login for a bunch of sites: Read More...

Posted Thursday, August 21, 2008 2:28 AM from David Recordon's Blog | 2 Comments

Filed under: OpenID

Securing OpenID@Work - Again

Last year we announced an experiment at Sun: in order to gather more information about the operational characteristics of "user-centric" identity technologies, we decided to roll out an OpenID provider for Sun employees. This OpenID provider was intended to be used by Sun employees for personal usage at various OpenID sites that have been popping up at some places. This experiment involved various parts of the company, including field people, products folks, the security team, and our Chief Privacy Read More...

Posted Monday, August 11, 2008 11:06 AM from Web Services Contraptions | 1 Comments

Filed under: Security, OpenID, Identity

Some security advice for our OpenID users

With the recent news about the DNS cache vulnerability, users are more exposed than ever to potential security attacks, including phishing or pharming attacks, that apply to OpenID as well as other network systems. For example, the ability to redirect DNS requests through cache poisoning opens the door to a significant OpenID security risk: if the OpenID provider is not employing TLS with server-side authentication — preferably mutual authentication — any affected DNS server could redirect the client Read More...

Posted Thursday, August 07, 2008 11:18 AM from Web Services Contraptions | 1 Comments

Filed under: Security, OpenID

Facebook Connect update

I have heard a number of great things about Dave Morin at Facebook and have been wanting to chat with him about his views on identity for a while, and yesterday I had the opportunity to sit down with him and Josh Elman. For those that don’t know Dave, he is one of the driving [...] Read More...

Posted Thursday, July 31, 2008 9:56 AM from Identity 2.0 | 1 Comments

Filed under: OpenID, Identity Tech

OAuth vs WS-Trust/WS*

I moderated a session at the recent SSO Summit titled “What is OAuth and WS-Trust, and where does it fit into your web services SSO initiatives“. “User-centric identity” is past-its-prime and “Identity as a Service‘ has already been beaten enough. And hence I was glad to get a chance to dig into the services/API use cases [...] Read More...

Posted Tuesday, July 29, 2008 12:56 PM from itickr.com | 1 Comments

Filed under: OpenID, Identity, SAML, OAuth, WS-Trust, Salesforce, SSO, Google Apps, SSO Summit, GData

Passport vs OpenID vs Facebook Connect

My post yesterday on Facebook Connect raised a few eyebrows. I had a few discussions with people and a comparison of consumer identity solutions past and present may provide some context. (I have excluded InfoCards as I see them as a strong, enterprise grade solution that is currently too heavy for general consumer use.) Passport Microsoft rolled [...] Read More...

Posted Thursday, July 24, 2008 10:04 PM from Identity 2.0 | 1 Comments

Filed under: OpenID, Identity Tech

Facebook Connect Helps Make the Case for OpenID

*** Hardt asks the question on his blog if Facebook Connect is a fatal blow to OpenID . I actually think that it helps to show why OpenID is going to become so valuable as you start to invest in your profile(s). To me, it shows that we're now all able to tell the same story and explain to normal people the value of having an identity and profile that can move about them around the web. Just as no one would let Microsoft own the protocol, no one is going to let Facebook either. I'm hoping that we'll Read More...

Posted Thursday, July 24, 2008 4:02 AM from David Recordon's Blog | 1 Comments

Filed under: OpenID, technology, facebook

Facebook Connect - fatal blow for OpenID?

At F8 today, Facebook rolled out their Friend Connect platform. With a small amount of code, other sites can integrate the Facebook identity system into their site. The keynote reminded me of early days of Microsoft as they rallied developers to build on their platform by explaining how the platform can help them and being [...] Read More...

Posted Wednesday, July 23, 2008 6:13 PM from Identity 2.0 | 1 Comments

Filed under: OpenID, Identity Tech

Congratulations TrustBearer

TrustBearer and David Corcoran work +1-260-399-1648 david.corcoran@trustbearer.com are doing cool stuff for years. Now they have been selected by Microsoft as one of two secure openid providers for HealthVault ! Congratulations! Interesting that Sean Nolan, chief architect of Microsoft’s HealthVault service, says that they are working to support Information Cards in HealthVault too! Now let's put that on the patient's mobile phone. Read More...

Posted Wednesday, June 25, 2008 9:19 AM from ignisvulpis | 1 Comments

Filed under: OpenID, trustbearer, healthvault

The Information Card Foundation: Helping Scale Mount Identity

YAF? (“Yet Another Foundation?”) Some in the identity community have had that reaction to the announcement of the Information Card Foundation (ICF) today at the start of the Burton Catalyst conference in San Diego. As one of two members of the ICF board who also serve on the OpenID Foundation (OIDF) board (Mike Jones is the [...] Read More...

Posted Tuesday, June 24, 2008 9:30 PM from Equals Drummond | 1 Comments

Filed under: CardSpace, OpenID, SAML, Information Cards, ID-WSF, General, I-Cards, Identity Commons, Social Web, Relationship cards, Information Card Foundation, Mount Identity

I’m for the Open Web

I’ve been struggling with the relevance of Data Portability for the last few months now. The ideas around Data Portability have been a work-in-progress for several years; the technologies and communities building them are mature in every way. In this post, I want to try to explain my reasons for leaving the Data [...] Read More...