Feeds

Friends of Sun rally for Passport-killer

They all agree it would be a jolly good thing

  • alert
  • submit to reddit

Top 5 reasons to deploy VMware with Tegile

Sun has been hinting for weeks that it's rustling up support for an alternative to Microsoft's version of single-sign-on for web transactions, and it went public today.

The Liberty Alliance Project's mission is quite a mouthful: to create "an open, federated solution for network identity - enabling ubiquitous single sign-on, decentralized authentication and open authorization from any device connected to the internet, from traditional desktop computers and cellular phones through to TVs, automobiles, credit cards and point-of-sale terminals."

The initial roster of "charter members" is interesting: it includes none of Sun's server infrastructure rivals (IBM, Fujitsu-Siemens and Hewlett Paqard are missing, along with the PC OEM crowd) but has an impressive roster of wireless and cellular manufacturers: numbering handset manufacturers (Nokia and Sony), carriers (Sprint, Vodafone, Cingular) and NTT DoCoMo which is both. Smartcard manufacturers including Schlumberger and Gemplus are there, and a few Sun customers who we imagine thought they were signing up for a Free! Prize Draw! of some kind.

Most interesting on the list is the presence of O'Reilly, Apache Group and Collab.net: they're recruited as conscience-keepers, we guess.

The strong roster of phone interests indicates that Sun recognises that the payment platform is likely to involve a smartphone, not a PC. With smartphones set to outnumber PCs at some point in the next decade, that's a good bet. Even without Sun's server rivals, there's enough of the wireless lobby signed on (no pun intended) to give the initiative momentum.

If the announcement looks like it was hurried out, we suspect it was. Until a couple of hours ago spokesmen were stonewalling enquiries on the Charter List membership, after IDG had gotten an advanced copy. And some of the web pages are still titled "Liberty Template".

Quite what technology is to be used is up for grabs, but it's likely to be Java-based given Sun's role in the group's creation, and religiously standards-based: anything else would provide The Beast with a turkey shoot.

At Santa Clara three weeks ago, we spent much of the morning haranguing Greg Papadopoulos and Marge Breya that Sun's web services pitch was essentially meaningless without an open, industry-standard single-sign on.
And this delivers that. Or at least, is the best chance of such an alternative to Passport.

So why aren't we deliriously happy? Well, there's little emphasis so far on privacy. The word appears once in the 979 word FAQ, five words from the end. And privacy is central to consumer acceptance of any kind of digital ID: without essential privacy guarantees the digital ID that Project Liberty requires becomes a back door to all kinds of database pooling - by marketing departments and governments - that isn't possible today. It could even, if we aren't vigilant, become your token for digital content as envisaged by Senator Hollings' SSSCA.

But it's early days as we say, and apparently it's not too late to change the name, either.

The Liberty Alliance Project sounds like one of those fringe libertarian nut websites that are entirely written using huge blinking Times fonts, that advocate legalising smack and helping protect the unborn by issuing them with handguns.

"Liberty is a code name for this formative initiative," says the press release.

Phew. ®

External Link

Project Liberty

Secure remote control for conventional and virtual desktops

More from The Register

next story
The cloud that goes puff: Seagate Central home NAS woes
4TB of home storage is great, until you wake up to a dead device
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
Intel offers ingenious piece of 10TB 3D NAND chippery
The race for next generation flash capacity now on
Want to STUFF Facebook with blatant ADVERTISING? Fine! But you must PAY
Pony up or push off, Zuck tells social marketeers
Oi, Europe! Tell US feds to GTFO of our servers, say Microsoft and pals
By writing a really angry letter about how it's harming our cloud business, ta
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.