My take is that we would never reach the question of federated identity,
because the chances of fraud (especially through a virus) are so high
that it will probably be a very long time before Internet-based voting
is a reality (if at all).
Joe
Joseph Chiusano
Associate
Booz | Allen | Hamilton
______________________--
700 13th St. NW, Suite 1100
Washington, DC 20005
O: 202-508-6514
C: 202-251-0731
Visit us online@ http://www.boozallen.com
-----Original Message-----
From: Michael Stiefel [mailto:]
Sent: Monday, October 30, 2006 9:40 AM
To:
Subject: [soa-rm-ra] Thought Experiment on SOA Security and Governance
One of my action items was to come with a scenario that we could use to
think about SOA Governance. Here is one "use case". Try to imagine what
it would take for the United States to have secure Internet voting in
state and federal elections.
Who would offer the "voting service"?
This would be the extreme case of Federated Identity. Would the state
federated identity servers be trusted by the federal identity servers? I
cannot imagine everybody getting an X509 certificate. Would we restrict
voting to a few days?
Comments?
Michael
