|
|
|
|
|
|
|
November 2007 - Security Briefs
-
In .NET 3.5 , CardSpace supports sending security tokens to websites that don't have an SSL certificate. This is for websites like personal blogs or other low-risk applications where using SSL might be overkill. In this example, Kim shows how to add support...
-
In part 3 , I walked through the following line of code: $newRule = New-Object Security.AccessControl.FileSystemAccessRule "keith", Modify, Allow I pointed out how the "Modify" was automatically converted into an enumeration value, promising that I'd...
-
Looks like Google is jumping into the fray , surprisingly late in the game. Amazon S3 has been around for a year already, and Microsoft already has a beta of Windows Live Skydrive . The online storage subscription-based service may be ready for release...
-
In a recent talk on CardSpace, one of my students asked a question about managed cards. One of the premises of Information Cards are the seven laws , and the first law implies that the user should be able to see the information being disclosed about her...
-
During the last year, I've been talking a lot about security token services and how they can be used to factor out authentication and authorization logic from applications. But building an STS is tricky today because a lot of the plumbing you need to...
|
|
|
|
|