Federated Identity exists today. Both Adobe and Microsoft have server based
products which use a WS-Trust type model on the back end to allow a trusted
region to be declared including CRL's for all CA's. Sadly, what you are
talking about is largely linked to the weak link in the chain - the people
who administer and operate the trust domain. The basic tenet is to deny all
and allow only specific trusted entities. All it takes is one slip.
D
On 10/30/06 11:00 AM, "Chiusano Joseph" <> wrote:
> My take is that we would never reach the question of federated identity,
> because the chances of fraud (especially through a virus) are so high
> that it will probably be a very long time before Internet-based voting
> is a reality (if at all).
>
> Joe
>
> Joseph Chiusano
> Associate
>
> Booz | Allen | Hamilton
> ______________________--
>
> 700 13th St. NW, Suite 1100
> Washington, DC 20005
> O: 202-508-6514
> C: 202-251-0731
> Visit us online@ http://www.boozallen.com
>
> -----Original Message-----
> From: Michael Stiefel [mailto:]
> Sent: Monday, October 30, 2006 9:40 AM
> To:
> Subject: [soa-rm-ra] Thought Experiment on SOA Security and Governance
>
> One of my action items was to come with a scenario that we could use to
> think about SOA Governance. Here is one "use case". Try to imagine what
> it would take for the United States to have secure Internet voting in
> state and federal elections.
>
> Who would offer the "voting service"?
>
> This would be the extreme case of Federated Identity. Would the state
> federated identity servers be trusted by the federal identity servers? I
> cannot imagine everybody getting an X509 certificate. Would we restrict
> voting to a few days?
>
> Comments?
>
> Michael
>
--
******************************************************
Sr. Technical Evangelist - Adobe Systems, Inc. *
Chair - OASIS SOA Reference Model Technical Committee*
Blog: http://technoracle.blogspot.com *
******************************************************
