The certi?¬?cate must chain to a
trusted certi?¬?cate authority or be in the trusted people??™s
store.
Service Busy. CardSpace can only have one instance
open per user at a time. This restriction is enforced because
of CardSpace??™s private desktop. If CardSpace is
open, and the site tries to make a call into CardSpace,
this error will be returned. This should be a fairly rare
236 CardSpace Implementation
case, unless a site tries to use CardSpace without requiring
user interaction.
Access Denied. CardSpace will return an access denied
error if the Information Card tag is in an embedded
frame from a domain other than the domain of the parent
page. This prevents a malicious site from embedding
another website??™s logon control into its own page. The
version of CardSpace that shipped with .NET 3.0 also
requires that a site be HTTPS. If the site is HTTP, an
???access denied??? error is returned. This type of error can
easily be avoided by blocking HTTP access to the logon
page or by redirecting to an HTTPS page. The .NET 3.5
version of CardSpace can support an HTTP page; so,
catching the ???access denied??? error can be a useful way
to tell people they need to upgrade.
Pages:
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360