Microsoft's message at RSA

[sbradcpa at pacbell.net (Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] )]

http://media.omediaweb.com/rsa2008/mediaplayerVO.htm?speaker=1_4

And if you want to listen to it, there it is as well.

Gunnar Peterson wrote:
> Hi Gary,
>
> I think they are doing it, Cardspace is the key enabling technology to 
> making it happen. Given how many enterprises are federation-enabled (and 
> how simply the rest can be), the biggest missing piece right now is that 
> we need an Identity Provider for the Internets.
>
> Of course this only helps to solve the access control problem, not the 
> defensive programming problem, you can still shoot yourself in the foot 
> with SAML and WS-* (Brian Chess and I gave a talk on this at RSA). But 
> at least it will be nice to have the banks and brokerage houses stop 
> having people type their username and passwords into web browsers, and 
> then blaming the consumer when things go amiss.
>
> -gp
>
> Gary McGraw wrote:
>   
> > hi sc-l,
> >
> > Here's an article about Mundie's keynote at RSA.  It's worth a read from a software security perspective.  Somehow I 
> > ended up playing the foil in this article...go figure.
> >
> > http://reddevnews.com/features/article.aspx?editorialsid=2470
> >
> > So what do you guys think?  Is this end-to-end trusted computing stuff going to fly with developers?
> >
> > gem
> >
> > company www.cigital.com
> > podcast www.cigital.com/silverbullet
> > blog www.cigital.com/justiceleague
> > book www.swsec.com
> >
> > _______________________________________________
> > Secure Coding mailing list (SC-L) SC-L at securecoding.org
> > List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
> > List charter available at - http://www.securecoding.org/list/charter.php
> > SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
> > as a free, non-commercial service to the software security community.
> > _______________________________________________
> >
> >
> >     
> _______________________________________________
> Secure Coding mailing list (SC-L) SC-L at securecoding.org
> List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
> List charter available at - http://www.securecoding.org/list/charter.php
> SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
> as a free, non-commercial service to the software security community.
> _______________________________________________
>
>