Blunder Dome Sighting  
privacy 
 
 
 

Hangout for experimental confirmation and demonstration of software, computing, and networking. The exercises don't always work out. The professor is a bumbler and the laboratory assistant is a skanky dufus.



Click for Blog Feed
Blog Feed

Recent Items
 
When to Optimize, When to Tune
 
Smartcard Trustworthiness
 
Emulating Obsolete Document Formats
 
If Metadata Is the Answer, What Is the Question?
 
Identifying the Objective, not its Location
 
Criteria for Web Application Security
 
Who Can You Trust?
 
Perfecting Secure Coding
 
The Future of Software Tools
 
It's You? Ping You're It!

This page is powered by Blogger. Isn't yours?
  

Locations of visitors to this site
visits to Orcmid's Lair pages

The nfoCentrale Blog Conclave
 
Millennia Antica: The Kiln Sitter's Diary
 
nfoWorks: Pursuing Harmony
 
Numbering Peano
 
Orcmid's Lair
 
Orcmid's Live Hideout
 
Prof. von Clueless in the Blunder Dome
 
Spanner Wingnut's Muddleware Lab (experimental)

nfoCentrale Associated Sites
 
DMA: The Document Management Alliance
 
DMware: Document Management Interoperability Exchange
 
Millennia Antica Pottery
 
The Miser Project
 
nfoCentrale: the Anchor Site
 
nfoWare: Information Processing Technology
 
nfoWorks: Tools for Document Interoperability
 
NuovoDoc: Design for Document System Interoperability
 
ODMA Interoperability Exchange
 
Orcmid's Lair
 
TROST: Open-System Trustworthiness

2004-12-01

 

Sxip - Pronounced "Skip" Is Digital Identity

Sxip.org - Sxip Overview.  2004-10-31: The first thing I notice about this site is that it uses HTTPS from the get-go. Recommended by Martin Terre Blanche as an open mechanism for single sign-on, Martin also raises concern for the root-authority model that appears to be at the heart of the Sxip open-source methodology. Since all of my web sites do ASP, I can't wait to see if the PHP form of the developer's kit can be converted. One cool thing the folks did (beside find a four-letter domain name, remarkable by itself), is have sxip.org for the general stuff, sxip.net for the technical stuff, and sxip.com for the business stuff.  I notice other teams often use .org for the open-source site, .com for the commercial site. Martin expresses a concern for the reliability of the model and what can make it dependable, including from a dependable top-level root. I wonder if it could be made to work with a reputation-oriented trust system (in the OpenPGP manner) or whether it really must be authority based.
Since I have learned about Ping Identity, I wonder what the connection is between these two open-source methodologies.  It would be nifty to do the whole job in JavaScript, especially for the lightweight authentication and attestation/assertion machinery that I am looking for.

 
Construction Structure (Hard Hat Area) You are navigating Orcmid's Lair.

template created 2004-06-17-20:01 -0700 (pdt) by orcmid
$$Author: Orcmid $
$$Date: 10-04-30 22:33 $
$$Revision: 21 $