{"id":655,"date":"2007-01-20T15:20:28","date_gmt":"2007-01-20T23:20:28","guid":{"rendered":"\/?p=655"},"modified":"2007-01-20T22:05:16","modified_gmt":"2007-01-21T06:05:16","slug":"dmitry-shechtmans-underdevelopment-blog","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=655","title":{"rendered":"Dmitry Shechtman's Undevelopment Blog"},"content":{"rendered":"

So much is happening in the identity discussion it's hard to keep up with it.  Through the miracles of ping-back I came across The Undevelopment Blog<\/a> by Dmitry Shechtman, and this posting<\/a> on a new proposal called Identity Manager: <\/p>\n

It seems like the OpenID community is currently bothered with the following two questions:<\/p>\n

    \n
  1. OpenID facilitates phishing<\/a>. What can be done about this?<\/li>\n
  2. FireFox 3.0 will have CardSpace and OpenID support<\/a>. What does that mean?<\/li>\n<\/ol>\n

    I addressed<\/a> the OpenID phishing problem<\/strong> even before it became wildly discussed. Unfortunately, the method wasn\u00e2\u20ac\u2122t foolproof<\/a>, to say the least. Several<\/a> other<\/a> suggestions have been brought up, but none seemed to solve the problem without making OpenID unusable.<\/p>\n

    Kim Cameron<\/a> of Microsoft has been repeatedly<\/a> promising<\/a> to elaborate on how CardSpace and OpenID<\/strong> could converge. Although he has yet to keep his promise, we can make an educated guess. We recently saw the FireFox extension Identity Selector<\/a> act as an in-browser OpenID-to-InfoCard bridge<\/a>. That is definitely something CardSpace folks would love to see as a standard browser feature, since it would effectively turn an OpenID into nothing more than a fairly insecure InfoCard.<\/p>\n

    Of course, OpenID could simply dismiss<\/a> CardSpace (I was trying to get into the average kool-aid drinker\u00e2\u20ac\u2122s shoes). Or it could very well learn from it. The CardSpace UI<\/strong> seems very intuitive:<\/p>\n