Privacy turmoils

Privacy, privacy. Interesting word: strange enough, I don’t think we have a decent correspondent in Italian. On one side you have titanic efforts for protecting it: think U-Prove, an entirely new kind of cryptography that actually prevents linkage (see Kim’s post about it; more details to come). On the other you have attempts…

NoSSL sample: a class for checking signatures of tokens sent to the RP in clear HTTP

NoSSL sample: a class for checking signatures of tokens sent to the RP in clear HTTP

[Edit: attached the sample app files]  In short: I show a simple class that checks the signature of self issued tokens sent on a normal HTTP connection (as opposed to HTTPS); the same class takes care of generating a UniqueID and giving access to claims. It basically covers for the NoSSL case the…

The entire chapter 2 of "Understanding Windows CardSpace" published on Code Project

The entire chapter 2 of "Understanding Windows CardSpace" published on Code Project

Few days ago I’ve been notified that the 2nd chapter of our book “Understanding Windows CardSpace” is now available for free online, on the pages of Code Project (takes some time to load from my connection, don’t give up). That’s a very big chapter, for architects and business decision makers, focused on showing…