I hope Kantara will be different but I have yet to see an "identity interoperabiity" initiative that properly articulates the real problem it's trying to solve.  Sometimes the question is more important than the answer.  So we need to start with a precise framing of what it means to have "interoperability" of identities.

Read more

Many federated identity models involve a central authentication broker, intended to break down “silos” that hold individuals’ assertions.  In practice these sorts of schemes have proven much harder to launch than expected.  Orthodox explanations for this can blame organisations for being too precious about their customers, or for treating security as a competitive differentiator.  But my analysis suggests that the total cost of a large number of traditional simple contracts turns out to be likely less than that of a smaller number of much more complex ones. 

Read more

I wonder if the Liberty Alliance has moved away from decentralisation as a central tenet of their work, and thereby possibly watered down its approach to privacy?

Read more