Welcome to IDtrust XML.org.

This is the official community gathering place and information resource for identity and trusted infrastructure standards. The site is hosted by the OASIS IDtrust Member Section, a group that encourages new participation from developers and users. This is an open, vendor-neutral community-driven site, and the public is encouraged to contribute content. See more about this site.

Stephen Wilson's Babysteps

Why is security so hard to sell?

Bruce Schneier last month reported on the RSA Conference and how security exhibitors are complaining that visitors to their stands aren't buying much. 

In respect of selling security in general, he points out that people don't usually buy car safety components, and neither should they buy information security per se. I couldn't agree more -- I believe that security should be sold on a sort of wholesale basis.

Read more

OASIS IDtrust Member Section Announces New Steering Committee Members

The OASIS IDtrust Member Section (MS), http://www.oasis-idtrust.org/, is pleased to announce the newly elected members of the IDtrust MS Steering Committee. Jung Leung and John Bradley have been elected to serve two year terms and Anil Saldhana of Red Hat has been elected to serve a one year term. 

More details. 

Read more

Member Ballot for OASIS Extensible Resource Identifier (XRI) Specification

OASIS announced that the Extensible Resource Identifier (XRI) Technical Committee has submitted two specifications for consideration by the membership as OASIS Standards.  Balloting will begin on May 16, 2008 and extend through the end of the month. 

Read more

Stephen Wilson's Babysteps

Privacy expectations around biometrics

Here's one of the most bizarre lines I've ever seen in biometrics and national security:

Fingerprints 'not particularly private,' security czar says
Edmonton Sun, Thu 10 April 2008
http://www.edmontonsun.com/News/Canada/2008/04/10/5244996-sun.html

Read more

Stepwise Card-Not-Present fraud solution

"Safety in Numbers"

Stepwise is a specially formatted digital certificate that, when loaded onto a Chip-and-PIN smart credit card, turns it into the best available defence against CNP fraud and ID theft in general.

The benefits of Stepwise in Card Not Present transactions include:

Read more

XML.org Focus Areas: BPEL | DITA | ebXML | IDtrust | OpenDocument | SAML | UBL | UDDI
OASIS sites: OASIS | Cover Pages | XML.org | AMQP | CGM Open | eGov | Emergency | IDtrust | LegalXML | Open CSA | OSLC | WS-I