- Worst of the lot: PCConnection and PCMall
- 10 ways the Chinese Internet is different
- Hacker writes rootkit for Cisco's routers
- Cisco loses $2 million order to Nortel
- Enterasys, Extreme hooking up?
BitTorrent blocking; SQL injection attack. Listen now!
Hacker writes Cisco rootkit; Microsoft launches online telescope. Listen now!
Learn how network-wide routing and CoS traffic visibility can help ensure your CoS traffic and converged IP service delivery
Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.
Discover the benefits of paravirtualization in this informative webcast today. This server virtualization-themed webcast not only explores how to improve virtualized server performance, but provides real-world user examples, explains how to optimize workloads and discusses the future of server virtualization. Focus on only the themes that interest you or watch all six consecutively for a full picture of how you can lower your costs significantly through consolidation and virtualization. Register below to learn more and be entered to win an Archos 605 Portable Media Player.
botnets dont make ur comp slow- Anonymous
SAN FRANCISCO – Microsoft plans to update its CardSpace identity software with new security options and is testing the technology for large-scale deployment using its Hotmail and other Live online services.
The company made the announcements during the first day of the Digital ID World conference, which is put on by Network World parent company IDG.
The CardSpace improvements will come as part of the .Net Framework 3.5 release, which is planned for the end of the year to coincide with the shipment of Visual Studio 2008.
Version 3.5 does not require Web sites using CardSpace to have an SSL certificate. With .Net Framework 3.0, every CardSpace site had to deploy as a secure HTTP (HTTPS) site. That meant that casual Web sites, such as those run by bloggers, had to buy and correctly install a certificate, and run from a fixed IP address just to provide simple log-ins via CardSpace.
“We figured out it was completely unreasonable for those people to have a certificate,” says Kim Cameron, Microsoft’s identity architect.
On the flip side, the 3.5 changes also mean that highly sensitive sites, such as those run by financial-services companies, can stipulate the use of high-assurance certificates.
“We also figured out the proper way to do this is for the identity provider to decide if a certificate is required or not,” Cameron says. “So we strengthened the high end and solved the low-end issue by allowing the identity provider to determine the type of security the site must have.”
Currently, CardSpace is one size fits all, but identity providers -- those who issue cards to users -- will be able to create managed cards that can have high, medium and low levels of security. In addition, users can self-issue cards to be used as replacements for username/password with sites that do not use SSL certificates.
CardSpace, which is an implementation of Microsoft’s Information Card technology, is a user-centric identity client that shipped with Vista and was back ported to XP.
RE: Microsoft tweaks CardSpace, launches massive scalability testBy Microsoft Subnet on September 25, 2007, 12:19 pmColumnist Dave Kearns has great insights into CardSpace and how it will affect enterprises and consumers. This large-scale test using Hotmail and other Live online...
Reply | Read entire comment
View all comments