Interesting Paper of Security Aspects of Passport SSO Scheme

[Hal Lockhart <hal.lockhart@entegrity.com>]

Here is an interesting paper on the security aspects of the MS Passport SSO
scheme. It of interest to us for at least two reasons.

1. It is similiar to the Web Browser Profile under development by the
bindings group.

2. Hailstorm/Passport Interoperability is still an open (although never
discussed) SAML issue: UC-13-07.

http://avirubin.com/passport.html

Note that the link to the Passport Whitepaper they cite is broken. The
Whitepaper is at: http://www.passport.com/Business/WhitePaper.asp?lc=1033

Hal