Kim Cameron and I recorded a podcast on digital identity for MySuccessGateway this week at the invitation of Jim Peake of SpeechRep Consulting. Jim was a gracious, informed, and enthusiastic host during our conversation, which covered a wide range of digital identity topics including identity theft, shared secrets, privacy, Information Cards and the Information [...]

Protecting the private space that makes each of us unique...

An interesting story coming out of White Plans, NY talks of a woman who's apartment was burglarized with close to $5,000 of electronics stolen including a couple of Apple laptops and how she was able to help catch the culprits as well as get her stuff back. The thief apparently was using the computer and one of the victim's friends (who knew her laptop was stolen) noticed a few days later that she was logged in (presumably on some instant messenger) and called her. The woman was able to use Apple's

Reading through the proposed topics for IIW2008a I noticed that George Fletcher blogged about something that I want too. Though calling it Identity Metasystem Markup Language seems a little too big, I think. Anyway I posted something similar to the osis-general mailing list on May 2nd . Using <link rel="metadata" ...> to indicate what the RP wants is a good idea, I think. This is very simple and very much simpler than embedded objects. What I like most about this idea is that we might get rid

"In fact, it is so clear I am wondering whether you want to publish it..."

Privacy is in the eye of the beholder . From time to time something happens that gives spectacular confirmation of that simple statement. Consider what happened in Italy just few hours ago. "L'agenzia delle entrate", the Italian tax agency, published on their website the all tax declarations filed in Italy in 2006 (story in English here ). It is my understanding that this is perfectly common practice in various countries, like some Scandinavian nations, but in Italy that gesture simply had no precedents.

Are ISPs abusing their trusted role in the Internet when they pose as other domains to create fraudulent cookies and place them on users machines?

No consipiracy or poison pill. Just a lot of details to nail down.

"It's basically like leaving the password to your computer everywhere you go without you being able to control it anymore." ...

And if previously separate contexts are merged, how do you achieve Data Minimization?