0 and Asset Virtualization 10
Malware and Identity Theft 16
A Business on the Rise 27
Passwords: Ascent and Decline 29
Ascent 29
Decline 33
The Babel of Cryptography 36
Cryptography: A Minimal Introduction 38
HTTP and HTTPS: The King Is Naked 46
ix
x Contents
HTTPS, Authentication, and Digital Identity 52
The Babel 57
The Babel of Web User Interfaces 79
Summary 84
2 HINTS TOWARD A SOLUTION 87
AWorld Without a Center 89
The Seven Laws of Identity 92
User Control and Consent 94
Minimal Disclosure for a Constrained Use 96
Justi?¬?able Parties 98
Directed Identity 101
Pluralism of Operators and Technologies 104
Human Integration 105
Consistent Experience Across Contexts 107
The Identity Metasystem 110
Some De?¬?nitions 112
Trust 115
Roles in the Identity Metasystem 116
Components of the Identity Metasystem 122
The Dance of Identity 130
WS-* Web Services Speci?¬?cations: The Rei?¬?cation
of the Identity Metasystem 136
The WS-* Speci?¬?cations 138
WS-* Implementation of the Identity Metasystem 156
Presenting Windows CardSpace 161
Summary 164
Contents xi
Part II THE TECHNOLOGY
3 WINDOWS CARDSPACE 169
CardSpace Walkthroughs 169
From the User??™s Perspective 170
From the Web Developer??™s Perspective 173
Is CardSpace Just for Websites? 175
System Requirements 176
What CardSpace Provides 177
Consistent User Experience 177
Brokering Trusted Interactions 181
A Deeper Look at Information Cards 184
Card Types 187
Personal Information Cards 188
Managed Information Cards 196
Features of the CardSpace UI 204
Private Desktop 204
Disabling CardSpace 206
Relying Party Identi?¬?cation Page 207
Managed Card Import Page 208
Common CardSpace Management Tasks 210
Management Mode 211
Creating and Editing a Personal Card 212
Moving Cards Between Computers 214
User Experience Changes in .
Pages:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25