Open ID, CardSpace, AOL, Digg; metasystem here we come
I am fed up with phishing, with having hundredsof logins to Web sites that are some permutation of email address, my standard user ID and the two standard disposable passwords I use for logins that are worthless to me and with having to type the wretched details in when I have remembered them. I want a nice and easy, secure, visual way of identifying myself. That's one reason I like CardSpace, which is Microsoft's implementation of a technology called information cards, which is intended to bring together a range of identity technologies in an abstraction called the identity metasystem (the same way we have file systems and printer drivers). I like Open ID too, because enough developers have heard of it that they might start using it on their sites - as AOL and Digg and others just have.
But please, don't tell me things like 'I won't trust CardSpace because I don't trust IE' without A going and reading up on the security background of CardSpace 2 being prepared to tell me what you think the security problem is. Want to complain about Microsoft technology? Make sure you know as much as I do about the way this is designed (or preferably more and you can teach me something)