Here is a summary of what Bill Gates said about OpenID and CardSpace at his RSA conference keynote. (Thanks to Mike Jones, who took these notes and let me publish them):<\/p>\n
\n\n
- Slide: Evolution of Identity: Making the Vision Real (with picture of two cards in hands)<\/li>\n
- People are used to choosing what credential to use where for what purpose (talking about cards in our wallets)<\/li>\n
- We use a variety of physical tokens to represent these things<\/li>\n
- CardSpace creates a vehicle to allow people to have a GUI for credentials that represent their identities or personas in particular situations<\/li>\n
- Each thing in the physical world conveys a particular set of information and discloses just enough information<\/li>\n
- CardSpace provides a drag & drop interface for identity<\/li>\n
- People will have to acclimate to it<\/li>\n
- People can create their own credentials and others can give you credentials<\/li>\n
- The system reasons about what the right credential is for you to simplify things for users<\/li>\n
- WS-* hints about what credentials that are being looked for<\/li>\n
- CardSpace shows candidates for credentials<\/li>\n<\/ul>\n
Then they segued to the OpenID collaboration announcement:<\/p>\n
\n
- Issues of reputation and trust are foundational on the Internet<\/li>\n
- Different levels of trust are needed in different contexts, such as blogs and access to enterprise resources<\/li>\n
- People have been thinking about issues of trust<\/li>\n
- OpenID 2.0 is doing this in the blog \/ Web 2.0 world, others are coming at this from the enterprise space<\/li>\n
- We see these approaches as being complementary<\/li>\n
- “Today we are announcing that we are supporting OpenID 2.0 and that they’re extending what they’ve done to enable the use of strong credentials”<\/li>\n
- They’re doing this because they see that it solves problems and attacks that a pure password approach has<\/li>\n
- We’re excited about this marriage of CardSpace and Web 2.0<\/li>\n
- This will help eliminate the possibility of man-in-the-middle attacks<\/li>\n
- CardSpace is built on our work on the WS-* specifications<\/li>\n
- OpenID will be endorsing the CardSpace marriage later today<\/li>\n
- We see this as a very smooth continuum with a common GUI metaphor<\/li>\n<\/ul>\n<\/blockquote>\n