{"id":646,"date":"2006-12-14T20:50:59","date_gmt":"2006-12-15T04:50:59","guid":{"rendered":"\/?p=646"},"modified":"2006-12-14T21:06:38","modified_gmt":"2006-12-15T05:06:38","slug":"646","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=646","title":{"rendered":"Firefox support for Windows CardSpace"},"content":{"rendered":"<p class=\"entry\">Via Mary&nbsp;Jo Foley&#39;s <a href=\"http:\/\/blogs.zdnet.com\/microsoft\/?p=151\" class=\"broken_link\">Unblinking Eye on Microsoft<\/a>,&nbsp;&nbsp;here&#39;s a piece on a new Firefox plugin supporting CardSpace on Window&#39;s Platforms:<\/p>\n<blockquote class=\"entry\"><p>A new plug-in providing Firefox support for Microsoft&#39;s CardSpace digital-identity framework is now available for public download.<\/p>\n<p>Solution architect Kevin Miller, who played an instrumental role in developing the technology, announced <a href=\"http:\/\/www.perpetual-motion.com\/kevin\/2006\/12\/i-with-help-from-cowboy-have-been.html\" class=\"broken_link\"><font color=\"#003399\">the availability of his Firefox add-on for Windows<\/font><\/a> via his blog.<\/p>\n<p>Why is Firefox support important? Until there is more third-party support for Microsoft&#39;s CardSpace, it will be slow to gain traction. But until CardSpace gains more traction, developers will be reluctant to build applications that make use of it. CardSpace, the technology formerly known as InfoCard, is a key piece of Microsoft&#39;s proposed Internet-wide identity metasystem.<\/p>\n<p>CardSpace is designed to store centrally an individual&#39;s multiple digital identities used to log into different secure sites <em>(not quite &#8211; see below)<\/em>. Microsoft built support directly into Internet Explorer 7.0. And CardSpace is one of the elements of the .Net Framework 3.0, which Microsoft introduced alongside Windows Vista and has back-ported to Windows XP and Windows Server 2003.<\/p>\n<p><img src=\"\/wp-content\/images\/2006\/12\/hanselman.jpg\" align=\"right\" \/><\/p>\n<p>Miller blogged: &#8220;You can <a href=\"http:\/\/www.perpetual-motion.com\/\" class=\"broken_link\"><font color=\"#003399\">download the (Mozilla CardSpace) extension here<\/font><\/a> for now. I&#39;ll jump through the hoops over at addons.mozilla.org this week, and hopefully it will be available there soon. I&#39;ll post an update when it is there. I&#39;ve also set up <a href=\"http:\/\/www.codeplex.com\/IdentitySelector\"><font color=\"#003399\">a project over at Codeplex<\/font><\/a> (as mentioned briefly in my first post), and will get the code posted there in the next day or so.&#8221;<\/p>\n<p>Scott Hanselman, chief architect with Corillian Corp., a Hillsboro, Ore.-based financial-services integrator, is bullish about CardSpace&#39;s prospects. &#8220;CardSpace is going to change it all. It\u00e2\u20ac\u2122s likely the biggest thing to happen to security since HTTPS. CardSpace changes the game for consumers. It\u00e2\u20ac\u2122ll take a few years, but after IE7 and FireFox and MacOSX all have CardSpace implementations \u00e2\u20ac\u201c and it won\u00e2\u20ac\u2122t take long \u00e2\u20ac\u201c we\u00e2\u20ac\u2122ll see Identity 2.0 happen,&#8221; Hanselman said.<\/p>\n<p>&#8220;If you contrast (CardSpace) with the way certificate management has traditionally worked on nearly any OS, it\u00e2\u20ac\u2122s significant because it makes secure certificates accessible to my mom. CardSpace and its related specifications make a secure identity experience accessible, both to the user and to the programmer.&#8221;<\/p>\n<p>There are a number of other third-party companies and <a href=\"http:\/\/www.eweek.com\/article2\/0,1895,1931662,00.asp\" class=\"broken_link\"><font color=\"#003399\">coalitions beyond Mozilla developing CardSpace-compatible providers<\/font><\/a> and support.&nbsp; Even Microsoft&#39;s own Windows Live team is looking to throw its backing behind the effort. The <a href=\"https:\/\/accountservices.passport.net\/ppnetworkhome.srf?lc=1033\" class=\"broken_link\"><font color=\"#003399\">Windows Live ID team<\/font><\/a> is developing a security token service (STS) that supports CardSpace, according to Richard Turner, senior product<\/p>\n<p>(Live ID is the successor to Microsoft&#39;s Passport authentication system.)<\/p>\n<p>&#8220;We need a proliferation of ID providers,&#8221; Turner said. &#8220;LiveID is just one of those providers.&#8221;<\/p><\/blockquote>\n<p>Mary Jo does an admirable job of describing what&#39;s at stake here, though I need to remind readers that CardSpace doesnt actually store digital identities centrally &#8211; it just stores metadata (pointers) to identity providers.&nbsp;&nbsp;This may sound like nit-picking, but it&#39;s hugely important in mitigating risk.&nbsp;<\/p>\n<p><strong>The main point is that Kevin has done some great work here.&nbsp; <\/strong><strong>I&#39;ve used his plugin with Firefox and it works beautifully.&nbsp;&nbsp;If you use Firefox on Windows, give&nbsp;it a try.<\/strong><\/p>\n<p>I&#39;ll try to start compiling a list of resources so people can easily see what to download given various configurations and predelictions.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Thanks to Kevin Miller, now Firefox users on Windows get full access to CardSpace.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[8,4],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/646"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=646"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/646\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}