The four credential types presented in the
previous list are what CardSpace currently supports. In future
releases, additional authentication types can be added, which is
a de?¬?nite CardSpace advantage. As new authentication technologies
role out, the user experience stays mostly the same.
Everything users have learned about using Information Cards
will still apply.
A Deeper Look at Information Cards
An IP can choose
which authentication
method to use
with their cards
198 Windows CardSpace
The capability to support multiple authentication types, have
multiple IPs, and use different token formats is how CardSpace
satis?¬?es the ?¬?fth law of identity: ???Pluralism of Operators and
Technologies.???
Why Do Managed Cards Use Username and Password
Authentication?
At ?¬?rst glance, a (username and password)-backed Managed Card seems to defeat
the purpose of a Managed Card. Wasn??™t the whole point of CardSpace to do away
with usernames and passwords? Not exactly, but it is an understandable misperception.
Usernames and passwords represent a lot of the problems with online
security. They encourage users to follow bad practices (such as reusing the same
password), and they are simply a bare credential that doesn??™t allow centralized
IPs to provide trustworthy identities that can be used at various IPs.
Pages:
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319