<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>UniqueID and PPID</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx</link><description>[edit: Caleb points out that I could be clearer in stating that using just the PPID for authenticating requests is truly a bad idea, and I have to agree. Language hardening in progress..] 
 In short: When you register users by using their information</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>NoSSL sample: a class for checking signatures of tokens sent to the RP in clear HTTP</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#7875879</link><pubDate>Sun, 24 Feb 2008 14:26:16 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:7875879</guid><dc:creator>Noticias externas</dc:creator><description>&lt;p&gt;In short: I show a simple class that checks the signature of self issued tokens sent on a normal HTTP&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=7875879" width="1" height="1"&gt;</description></item><item><title>NoSSL sample: a class for checking signatures of tokens sent to the RP in clear HTTP</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#7875632</link><pubDate>Sun, 24 Feb 2008 14:07:22 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:7875632</guid><dc:creator>Vibro.NET</dc:creator><description>&lt;p&gt;In short: I show a simple class that checks the signature of self issued tokens sent on a normal HTTP&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=7875632" width="1" height="1"&gt;</description></item><item><title>Certificates, Information Cards, PPIDs and misconceptions.</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#7385778</link><pubDate>Sat, 02 Feb 2008 12:48:11 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:7385778</guid><dc:creator>idunno.org</dc:creator><description>&lt;p&gt;Certificates, Information Cards, PPIDs and misconceptions.&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=7385778" width="1" height="1"&gt;</description></item><item><title>On the idea of Portable STS (P-STS)</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#7281511</link><pubDate>Mon, 28 Jan 2008 09:52:24 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:7281511</guid><dc:creator>Vibro.NET</dc:creator><description>&lt;p&gt;Already Sunday evening. It was a weird weekend, partially spent under the influx of powerful pain killers&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=7281511" width="1" height="1"&gt;</description></item><item><title>Windows CardSpace will work without HTTPS, too</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#5115990</link><pubDate>Tue, 25 Sep 2007 11:09:55 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:5115990</guid><dc:creator> Vibro.NET</dc:creator><description>&lt;p&gt;In short: I discuss a new feature, introduced by the .NET framework 3.5 and by a (future) update of IE,&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=5115990" width="1" height="1"&gt;</description></item><item><title>CardSpace, PPID, Security, Javascript Hijacking</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#2017982</link><pubDate>Tue, 03 Apr 2007 15:51:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:2017982</guid><dc:creator>Mike Taulty's Blog</dc:creator><description>&lt;p&gt;I was on my way up to Glasgow today to talk at an MSDN event about Framework V3.0 and it meant that I...&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=2017982" width="1" height="1"&gt;</description></item><item><title>re: UniqueID and PPID</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#1548118</link><pubDate>Sun, 28 Jan 2007 23:31:01 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:1548118</guid><dc:creator>Garrett Serack, MSFT</dc:creator><description>&lt;p&gt;I have finally posted my PPID information.&lt;/p&gt;
&lt;p&gt;&lt;a rel="nofollow" target="_new" href="http://www.fearthecowboy.com/2007/01/me-and-my-ppid-can-i-rely-on-it.html"&gt;http://www.fearthecowboy.com/2007/01/me-and-my-ppid-can-i-rely-on-it.html&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Garrett Serack | CardSpace Community PM | f e a r t h e c o w b o y &lt;/p&gt;
&lt;p&gt;blog: &lt;a rel="nofollow" target="_new" href="http://fearthecowboy.com"&gt;http://fearthecowboy.com&lt;/a&gt;&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=1548118" width="1" height="1"&gt;</description></item><item><title>UniqueID maintenance in the store</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#1484524</link><pubDate>Wed, 17 Jan 2007 21:37:13 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:1484524</guid><dc:creator>Vibro.NET</dc:creator><description>&lt;p&gt;The comments to my blog stopped working. I am working on it, but in the meanwhile here there's the answer&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=1484524" width="1" height="1"&gt;</description></item><item><title>re: UniqueID and PPID</title><link>http://blogs.msdn.com/b/vbertocci/archive/2007/01/15/uniqueid-and-ppid.aspx#1470762</link><pubDate>Mon, 15 Jan 2007 14:55:29 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:1470762</guid><dc:creator>Matt Ellis</dc:creator><description>&lt;p&gt;Hi Vittorio.&lt;/p&gt;
&lt;p&gt;I'm wondering what happens if the IP's cert changes (perhaps the private key is compromised)? With a bit of co-ordination, you can update your copy of their public key, so you can still verify incoming tokens, but would the unique id now be incorrect? Is this even a situation that can happen?&lt;/p&gt;
&lt;p&gt;Cheers!&lt;/p&gt;
&lt;p&gt;Matt&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=1470762" width="1" height="1"&gt;</description></item></channel></rss>