OASIS has published a draft web service profile for XACML, called WS-XACML. Now, this seems to get very interesting, since it has the potential to truely deliver 'User-Centric' identity (as opposed to Infocard's ServiceProvider-centric identity).

The significant difference here is the availability of two sections in the XACML assertion: one defining the requirements, and the other the capabilities - for BOTH, server and client. InfoCard (and its implementations like Windows CardSpace or Higgins) do not really negotiate requirements, but the service provider (i.e. Relying Party) dictates its requirements and the client will only present Infocard conforming to such requirements. With WS-XACML (which - by the way - also works out-of-the-box with rich client applications) there is an initial policy matching of the server's requirements with the client capabilities AND vice versa. The superiory becomes obvious, when thinking about how easy it is with an InfoCard system to present a card with too much information.

tag: Privacy, Standards, Web Services, OASIS, XACML

By now, most people must have seen what caused some massive traffic delays in Boston, fear of terrorism, and some pretty uncomfortable press for a major network. Ok, the almost pavlovian response to a number of unlicensed ad signs might have been overblown, and one could make the case that this plays well into a general atmosphere of hysteria and fear.

However,  even the remotest advertising monkey should have realized by now, that there has been a major terror attack in which more then 2500 people died. Part of this attack (and subsequent attempts) was an intentional disruption of public services - bridges, planes, trains, etc. Putting unprofessional ad signs, with wires, batteries and LEDs at critical infrastructure points and high-traffic areas is not only stupid, but DOES raise old anxieties. This is highly unnecessary and - as far as I am concerned - "Terror in Advertising" (some might call it 'Guerilla tactics', but this seems to be a point of view).

I would love to see those responsible punished by the full extend of the law, since these sign were deliberately positioned at critical points - it seems quite implausible that the possible ramifications of such placement were not obvious (unless - of course - they do plead stupid, which is also not too unlikely). Also, a full prosecution and punishment (including termination of the cartoon series, and revocation of their broadcasting license) should serve as a reasonable deterrence for potential other Terror-Advertisers, they feel like they have to top this so called 'stunt'.

tag: Boston, Advertising, Terror