In short: this is the description of a sample that sends a CardSpace-obtained token to an AJAX service implemented with the new Orcas features. Few posts ago I published a tutorial about using CardSpace with Silver. While talking about it with Kushal Shah from the Workflow team, he suggested that it could be…
The monthly report from http://www.antiphishing.org/ is always an instructive read. This April report contains some surprising numbers, as shown by the graphic below: The happy spike you notice in April07 is in fact not happy at all: it shows the efforts of phishers to strain the antiphishing countermeasures offered by IE7 and Firefox 2….
Passwords are bad. It is really necessary to restate it? Wired has a very interesting story about the singer of Linkin Park (one of the most interesting bands in the last years IMHO, but that’s not important here). Long story short, a hacker guessed one password (“Charlie”, not a very strong one) in…
Today there was a burst of great Identity news from Microsoft: I don’t know from where to start!!! 🙂 The Open Specification Promise (OSP) welcomes under its umbrella the Identity Selector Interoperability Profile. If you are not familiar with the OSP, the bottom line is that an open source project or a vendor…
Caching is one of the topics that sooner or later arise when you reason about cardspace. If I use the same card across different applications at the same time, or in a short period of time, can’t I cache the card? If with a certain application I reuse the same card all the…
In the last loooong post, the one about using CardSpace together with the new Receive activity featured by the Beta1 of the framework 3.5, I mentioned I would have attached the final solution: however I didn’t do it right away, to give some incentive to actually go through the simple steps of the tutorial. …
In short: this is a step by step tutorial for creating from scratch a Workflow Service with the Beta 1 release of Visual Studio codename “Orcas”. The tutorial shows how to secure the service with Windows CardSpace, how to create a client application on the fly and how to access claims from the…
If you followed this blog in the last 4 years, chances are that you are into WS-* and especially identity related specs. Well, rejoice: Don Schmidt, the man behind ADFS, just got an outlet to the blogosphere. I may be doing a lot of hand waving on trust and federation, but let’s face it:…