http://blogs.msdn.com/b/socaldevgal/archive/2007/04/09/cardspace-question-just-how-is-trust-established-or-revoked-between-the-ip-and-the-rp-for-managed-cards.aspxThis question was asked at my last event - IP stands for Identity provider and RP stands for Relying party. Do remember that we are talking only about managed (not personal) cards here. Nigel Watling of the CardSpace group was kind enough to provide meen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.msdn.com/b/socaldevgal/archive/2007/04/09/cardspace-question-just-how-is-trust-established-or-revoked-between-the-ip-and-the-rp-for-managed-cards.aspx#8647472Tue, 24 Jun 2008 17:49:16 GMT91d46819-8472-40ad-a661-2c78acb4018c:8647472Paul Noeldner<p>Separating Logon Authentication Trust from the rest of this would make it much much simpler. &nbsp;A site can determine which Trusted Authentiation Services (subset of IP functionality) to trust by looking at either their individual token, or at the trusted issuer, just like SSL. &nbsp;So one might trust authentication services with Verisign tokens for example. &nbsp;</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=8647472" width="1" height="1">http://blogs.msdn.com/b/socaldevgal/archive/2007/04/09/cardspace-question-just-how-is-trust-established-or-revoked-between-the-ip-and-the-rp-for-managed-cards.aspx#2073926Tue, 10 Apr 2007 17:50:15 GMT91d46819-8472-40ad-a661-2c78acb4018c:2073926lynnlangit<p>from above &quot;when an RP (website) decides to trust a particular IP (in your question a bank) it stores that IP’s public key and does a key lookup as part of the token validation&quot;</p> <p>do remember that in the CURRENT iteration of CardSpace, the function of this implementation is to PROVIDE identity and NOT (yet) to provide payment</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=2073926" width="1" height="1">http://blogs.msdn.com/b/socaldevgal/archive/2007/04/09/cardspace-question-just-how-is-trust-established-or-revoked-between-the-ip-and-the-rp-for-managed-cards.aspx#2073717Tue, 10 Apr 2007 17:34:08 GMT91d46819-8472-40ad-a661-2c78acb4018c:2073717Geoff<p>My question is what it will take to gain trust from bank that issues the managed cards and what they will be looking for from you of the sites that you then trust.. Ie i am website..ChucksGoods.com I selling widgets. I can either go to each bank and go through there loops to get trust or i can go to another website abcd.com that has trust from all the banks and get trust from them. </p> <p> &nbsp; WHat are the guidlines for the abcd.com to get trust from the credit card companies and what are going to be the requirments for chucksgoods.com to get trust from abcd.com..</p><div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=2073717" width="1" height="1">