[OpenID] Infocards [SAML Token] Vs OpenID Infocards [OpenID Token]

Johnny Bufu johnny at sxip.com
Wed Dec 19 22:51:50 UTC 2007


On 19-Dec-07, at 2:33 PM, =JeffH wrote:
>> (to which I would add no
>> infocard crypto requirements - the OpenID Infocard token is posted in
>> clear text to the RP).
>
> huh? what crypto requirements?

The one Kim Cameron mentions here:
http://www.identityblog.com/?p=430

The links in the blog post are broken now; he used to have nice step- 
by-step examples for how to decrypt the encrypted SAML token.

>> ..cannot be accomplished with the current Infocard + SAML  
>> specification..
>
> which specific "Infocard + SAML specification" are you referring  
> to? url?

http://download.microsoft.com/download/1/1/a/11ac6505- 
e4c0-4e05-987c-6f1d31855cd2/Identity-Selector-Interop-Profile-v1.pdf


Johnny




More information about the general mailing list