Windows CardSpace Team Bloggers

How did you get started in software development?

2008-07-25T02:32:00Z

[I suggest my usual readers to skip this post altogether, you won't find anything useful here :-)] Romeo tagged me with this "How did you get started in software development?" quest. I was already feeling guilty, because given how swamped I am I knew I was not going to have time to reply to the tag: OTOH right now my main PC is unusable, since I am repaving a new HD on it, hence while the network install goes I can write this up. How old were you when you started programming? A quale età hai cominciato...(read more)

2 new great reviews for our book, and status after 1/2 year of availability

2008-07-21T08:00:00Z

It's since April that I don't write about the book (at the time we released the entire Chapter 2 on MSDN ). Last week I received notice that 2 new reviews were published: one is from the Denver Visual Studio User Group , the other is on Paul Van Brenk's blog . Both reviews are extremely nice, for which we are very grateful; I especially like the fact that in both cases the reviewers perceived our intention to deal with the problem from an holistic point of view, regardless of our affiliation with...(read more)

Issuing smartcard backed managed cards... using Zermatt

2008-07-17T21:30:00Z

We are back! I hope you had fun with the STS tutorial I posted yesterday night ; here we move a step further and examine how to equip our STS with managed card issuance logic & UI. As anticipated, this is going to be MUCH faster. If you recall, in the last post I asked you not to delete the Default.aspx page that the new web site template created for you: we are going to put our card issuance UI there. At thsi point the visual studio project should look as follows: The only new element I added...(read more)

Setting up a quick & dirty STS which supports smartcard backed managed cards... using Zermatt

2008-07-17T07:11:23Z

Just back from vacation. The tan barely started to fade, and here I am already playing with the new shiny toy :-). Did you experiment with Zermatt by now? As Kim mentions the samples (and the documentation) are an excellent way to start, and I am sure that blog posts & tutorials will soon start mushrooming here and there in the blogosphere: here I begin my humble contribution with my first technical post about Zermatt . I had *absolutely* no hesitations when deciding which scenario I should tackle...(read more)

John Fontana on Zermatt

2008-07-11T19:25:24Z

I am sure you already saw Kim's post about John Fontana's interview with Stuart , appeared on Network World . I like how John communicates the importance of this release, and how it positions it in the context of the broader picture. Recommended reading :) Also, the blogosphere is buzzing: if you toy with your favorite feeds or search engines, you'll find many sources chiming in or even already playing with Zermatt ... that's the spirit! See you next week ;-) Read More......(read more)

Getting down with Zermatt

2008-07-10T01:09:50Z

I found the samples very clear, and uncluttered with a lot of "sample decoration" Read More......(read more)

Key Piece of The Identity Puzzle

2008-07-09T23:15:24Z

Microsoft has released a beta of its most important developer tool to date Read More......(read more)

Problem between keyboard and seat

2008-07-09T22:43:17Z

Well, when you switch off all security mechanism then, yes, there are security flaws... Read More......(read more)

Announcing the Beta release of “Zermatt” Developer Identity Framework

2008-07-09T17:58:04Z

Ahh, I’ve been looking forward for this post for a looong time. We just made available for download the bits of the Beta of “Zermatt” Developer Identity Framework . “ Zermatt ” is the codename of a .NET framework that helps developers build claims-aware applications to address challenging application security requirements using a simplified application access model. Let me expand a bit on that. If you want to develop applications that take advantage of claims & identity Metasystem goodness in...(read more)

Digital Identity Podcast for MySuccessGateway

2008-07-04T07:32:17Z

Kim Cameron and I recorded a podcast on digital identity for MySuccessGateway this week at the invitation of Jim Peake of SpeechRep Consulting. Jim was a gracious, informed, and enthusiastic host during our conversation, which covered a wide range of digital identity topics including identity theft, shared secrets, privacy, Information Cards and the Information [...] Read More......(read more)

CardSpace Consumer Website

2008-07-04T05:56:31Z

Microsoft recently created a Consumer Website for CardSpace to educate end-users about Windows CardSpace and Information Cards. This complements the developer-focused information at the MSDN CardSpace site and the CardSpace Community Site. No, it’s not the kind of content targeted at regular readers of this blog – especially the short video – but then, that’s [...] Read More......(read more)

New home for Windows CardSpace on microsoft.com

2008-07-01T22:32:43Z

One year ago we had a brief wall-to-wall exchange with Keith about the need of having consumer (as non-developer) info about CardSpace. The Information Card Foundation is doing a great job at handling those info for the general concept of information card. Specifically for Windows CardSpace, I am happy to announce that we now have a consumer friendly home for Windows CardSpace ! I am especially fond of the two videos ( home & work ) from the UK crew; and big kudos to Eileen for the entire effort....(read more)

How often should you ask for a token?

2008-07-01T07:56:14Z

On the Seattle-Paris flight. I've just posted the piece about validation-authentication-authorization , and i am a bit bothered by the fact that I was unable to delve into greater details for what concerns the authoriZation part. In particular, I'd like to address one of the misunderstandings which can derive from transporting verbatim the knowledge of Kerberos & "unattended" security in general to the world of user centered identity management. Some of you claimaniacs may find the stuff below...(read more)

Validation, Authentication, Authorization: mangling tokens for your dark purposes

2008-06-30T20:06:51Z

Flying back from S.Diego, after attending a great edition of Catalyst. I should probably write down my impressions before they fade, like it happened with the IIW, but there's in fact something (only mildly related) that bugged me for quite some time and I just want to flush it out of my system before going in vacation (somehow I feel that my old time Italian friends would not appreciate me blabbering about tokens, especially if I do it with my mouth full of focaccia al formaggio :-)). Ok, the story...(read more)

First Verified Age Information Cards

2008-06-29T05:37:27Z

Last week IDology demonstrated a first that many of us see great possibilities for: an Information Card making a verified age claim. I’m excited at this first step towards the goal of enabling people to routinely use interoperable verified claims about themselves via Information Cards. Obtaining my age-verified card online was easy. I submitted my name, address, and birth date (via a self-issued card) to IDology’s verification process. Next they asked me a few additional questions to confirm that...(read more)