Browse by Tags

• .net3
• ActiveX
• cardstore
• ceremony
• certificate
• codeplex
• consent
• DIDW
• DIDW2007
• DigitalMe
• Firefix
• firefox
• Firefox extension
• FriendsWithCards
• Higgins
• html object
• id selector
• Identity
• IE
• IE7
• informationcard
• interop
• livehttpheaders
• mime-handler
• no-SSL
• OpenID
• OSIS
• paymentCard
• user agent
• variable claim
• xbl
• xmldap

• Doppelgänger

  Today I updated the xmldap relyingparty to contain two HTML objects of type "application/x-informationcard". To keep things simple I just have put two forms on the website each containing one object. The only difference between the two is that on requires a self-issued card while the other does not restrict the issuer. The id selectors seem to handle this well. I tested it with the openinfocard id selector and with CardSpace. What is this good for?! Well, one object could request a card from the Read More... Posted Thursday, June 05, 2008 9:41 AM from ignisvulpis | 1 Comments Filed under: CardSpace, OSIS, openinfocard, xmldap

• Instant Managed Cards

  One of the problems around managed cards is that if they are protected through username and password then the benefit to the user seems not as big as one might expect. The promise to get rid of passwords is not completely fulfilled because now instead of giving a username and passport to a RP I have to give one to the IdP. The user now is disappointed and the product management responsible for the introduction of information cards at the RP is unhappy because the user is disappointed. Well, the promise Read More... Posted Monday, May 12, 2008 1:54 PM from ignisvulpis | 1 Comments Filed under: CardSpace, openinfocard, id selector, user agent, ceremony, consent

• Interflop

  You might have noticed that sometimes the security token on xmldap's relyingparty is not valid. The conditions on the token are not met because the time on the server was about 30 minutes off. Chuck corrected this immediately and I wanted to verify that the relyingparty there now accepts a security token produced by the latest openinfocard id selector. I quickly installed it, but booom; it failed. The line of code in question was unnecessary anyway so I cleaned up the javascript quickly; transferred Read More... Posted Monday, March 31, 2008 10:21 AM from ignisvulpis | 1 Comments Filed under: CardSpace, openinfocard, interop, xmldap, FriendsWithCards

• Dynamic objects

  Last autumn when a change in Firefox forced us to change the HTML object tag handling we kicked XBL and used DOM event handlers as the primary mechanism to detect and handle objects of type application/x-informationcard. At that time the three id selectors that use this same piece of code openinfocard, CardSpace for Firefox (on codeplex) and DigitalME stopped working on sites that dynamically create or change the objects of this type. Yesterday Barry from the SharpSTS project contacted me that his Read More... Posted Friday, March 28, 2008 9:20 AM from ignisvulpis | 1 Comments Filed under: CardSpace, openinfocard, codeplex, xmldap, DigitalMe, Firefix

• Certificate Chain Verification for CardSpace

  When Microsoft released .NET3.5 changes were made that are not that much visible on the surface. One of these changes is the verification of certificate chains. Formerly only certificates were "validated" but not up to the root certificate through the certificate chain. Mike Jones was so kind to notify me of this improvement and provided the (preliminary) documentation to implement this; and Caleb Baker clarified details where the documentation was indeed "preliminary". Thanks. Today I am proud to Read More... Posted Thursday, March 20, 2008 7:18 PM from ignisvulpis | 1 Comments Filed under: CardSpace, openinfocard, Firefox extension

• OpenID leads to Information Cards

  After a long pause you can hear the voice of the master of the identity metasystem again here . Kim Cameron explains why the success of openid leads to the success of CardSpace information cards. Some sometimes forget that there are "alternative operating systems identity selectors". Examples are of course the openinfocard identity selector or the higgins based identity seletor digitalme . Read More... Posted Monday, February 25, 2008 4:27 AM from ignisvulpis | 1 Comments Filed under: CardSpace, OpenID, Identity, openinfocard, DigitalMe, Higgins, informationcard

• wishlist

  openinfocard GUI Drag&Drop for card import and export. Drag&Drop for card selection. E.g.: Firefox sidebar displays the cards and I can drag it on the infocard icon to use it. Tree/list view of my information cards, sortable by issuer, token type, ... More flexible display of claims; one column, two columns... Store window position and size. Ensure that card that was used the last time at this RP is visible. ... Features Key generation for self-issued cards from masterkey; to be compatible to Read More... Posted Friday, December 14, 2007 10:57 AM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard

• http header: X-ID-Selector

  There is currently a discussion how and if a browser should indicate the presence of installed id selectors. I am against "polluting" the user-agent string. Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506) This indicates only that .NET3 is installed, it does not tell the relying party whether CardSpace is active or disabled. I prefer that the id selector adds a HTTP header e.g. "X-ID-Selector" to the HTTP requests. This is easy to implement; Read More... Posted Monday, December 10, 2007 5:08 PM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard, livehttpheaders, firefox, IE, ActiveX, IE7, mime-handler, .net3

• xmldap paymentCard_sts certificate

  Kim Cameron noted that the certificate of the xmldap paymentCard_sts was expired. This is/was my fault. I used the wrong key alias and selected the expired certificate instead of the current one. I changed the application's configuration today. Now I am able to create a card and import it into CardSpace , which formerly complained about the expired certificate and refused to import the managed card. Please note that the paymentCards are importable into CardSpace but not usable with CardSpace, because Read More... Posted Monday, December 10, 2007 6:21 AM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard, id selector, paymentCard, certificate

• xmldap / openinfocard paymentCards

  At DIDW 2007 I heard Sid Sidner talk about variable claims and how they could be used for online payment. Kim Cameron , who sat next to me during Sid's talk, suggested that I should include this into the openinfocard id selector . Today I uploaded two new applications to xmldap.org. You can use the STS to create a paymentCard and import it into the openinfocard id selector: Next go to the paymentCard relying party . You can change the price to see that the claim can be changed by the merchant. Type Read More... Posted Saturday, December 08, 2007 1:48 PM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard, firefox, xmldap, DIDW, DIDW2007, variable claim

• Good-Bye XBL

  I just uploaded a new version (0.9.8) of the openinfocard id selector. You can find it in the project's download area . Finally we got rid of the XBL code. There are several problems with XBL; the most notable beeing that bindings are not applied to objects in the head section of the html code on the relying party. Andrew Hodgkinson had the idea to replace the XBL by a progress listener. The progress listener gets every event while the html code is parsed and the page constructed. Clever! I tweeked Read More... Posted Saturday, November 24, 2007 5:17 AM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard, xmldap, DigitalMe, cardstore, xbl

• New Versions for Firefox 2.0.0.9

  Please find the new version of the openinfocard id selector for Firefox 2.0.0.9 in the project's download area . It is best used with the new version of the identity selector selector which can be downloaded from this project's download area . I tested both with most of the relying parties in the table " I2 Relying Party results with Identity Selectors ". First the id selector selector with CardSpace 1.0, then with the latest openinfocard id selector. I did not test RPs that bugged me with certificate Read More... Posted Wednesday, November 07, 2007 7:09 AM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard, id selector, firefox, xmldap, DigitalMe, xbl, Firefox extension, no-SSL

• Supporting Information Cards with Browsers as of the Information Card Profile V1.0

  While investigating the issues described in my former post I began to wonder why this all has ever worked... You had this feeling in your computer science life too now and then, right? My personal history regarding this is: Chuck designed the code of the openinfocard id selector in a way that it worked with early relying parties according to the examples given in THE GUIDE . Our relying party at xmldap.org is designed excactly along the examples from the guide. When I joined the team I did not have Read More... Posted Wednesday, November 07, 2007 7:03 AM from ignisvulpis | 0 Comments Filed under: CardSpace, openinfocard, id selector, IE7, xmldap, html object