Because the MEX information is instrumental in securing
the next steps, a malicious endpoint would be able to
communicate a false policy that could expose the user??™s
credentials when the user went to contact the false STS.
Using SSL ensures that CardSpace can acquire a certi?¬?-
cate to the endpoint.
Identity. Identity is the X.509 certi?¬?cate used to provide
the identity of the issuer to the user. Typically, this is the
same certi?¬?cate used to digitally sign the Managed Card.
Second, the token service contains information about the
method used to authenticate to the STS in a user credential element,
using one of the four supported authentication types supported
by CardSpace for Managed Cards. The elements in the
user credential are the following:
Display credential hint. A small message displayed to
the user before authentication. This can range from
???Please insert your smartcard now??? to ???Use your domain
credentials??? to ???Hello World!???
X.509 V3 credential. An XML fragment describing the
X.509 certi?¬?cate required for authentication as a Base64-
encoded SHA1 thumbprint of the certi?¬?cate.
Kerberos V5 credential. An empty element that indicates
that the STS requires a Kerberos token for authentication.
Pages:
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323