I have noted a new item has been added to my XP Control Panel called "Windows Cardspace" Judging by the Version number and Copywrite date (2006) it has been around for some time I have tried to work out its purpose It is another Personal ID Program Like PayPal/ IM ID without bank details but the Naive could enter their Whole location details Why? Hints at Roboform too
Only clue comes in this Help File sentence which is uncopyable Says roughly :
Quote:
"Windows CardSpace" can replace the Usernames and Passwords used to log into and Register with Online services and Websites
Looks feels like the current Yahoo Security Login which times out every 2 weeks
NOTE There are 2 Card variations Personal(for general logins) can keep 1 card for many sites. Managed (For specific shopping sites?) which can carry credit card info Both are encrypted
To the Web Masters/Admin a couple of questions A) Is this a viable and Safe thing to use ? B) Users can amass any number of cards so there is a small chance of fraudulent use possible? C) Is there any changes you need to make to accept applications/logins from this source, and Will they still need CAPTCHA Verifying? Also will it bypass the site registration process Logging all visitors in as "Members"!?
Only thing that worries me is its location in the Control Panel I personally would Make a Password Locked Custom Folder for this Feature (and Hide it somewhere else)...Nothing mentioned in the Help File regarding this basic security matter!
Microsoft initially shipped Windows CardSpace with the .NET Framework 3.0, which runs on Windows XP, Windows Server 2003, and Windows Vista. It is installed by default on Windows Vista and is available as a free download for XP and Server 2003 via Windows Update. An updated version of CardSpace shipped with the .NET Framework 3.5.
FYI I have .NET Framework 3.5 installed, so those who have not got this installed, or older than version 3.0 will not be able to access this feature ...Am I correct?
-------------------- History so far.. 10 years surfing & 29 Years Computing (First ZX81 1k)
Post Extras:
BedstorfromAP
Reg'd: Thu
Posts: 5096
Loc: 32 Bus Stops West of Wigan UK
I hated it years ago Something Microsoft had, called Microsoft Passport which was supposed to be good for login into any MS site It still is in existence! www.passport.net In practice it would lose your log in within 2 or 3 visits Is this MS's "fixed" method of logging in/Authentication but extends to any site with Registration facilities? I'm 50/50 on this ...But looking elsewhere Google Accounts got it right with Gmail and that has never been any Trouble
I did note the old Passport Program was vunerable to Hackers. User Information kept on MS's Servers? This New version apparently has more on the client computer than Logged at MS's server and its now encrypted So the questions are, have the Hackers been put off by the encryption? and B) Is it reliable to use? If the answer is Yes to both And you can find in this Search "Positive Comments" Then by all means give it a try
Previous
Index
Next
Threaded
Edit
Reply
Quote
