Microsoft .NET Passport: A Security Analysis

Authors:
Rolf Oppliger
Affiliations:
-
Venue:
Computer
Year:
2003

Citing 2
Cited 5

Risks of the passport single signon protocol

Proceedings of the 9th international World Wide Web conference on Computer networks : the international journal of computer and telecommunications netowrking
Security Technologies for the World Wide Web

Security Technologies for the World Wide Web

A concept of interoperable authentication framework for dynamic relationship in identity management

ICACT'10 Proceedings of the 12th international conference on Advanced communication technology
An approach of authentication base on modified digital identity metasystem in service-oriented architecture

WISM'11 Proceedings of the 2011 international conference on Web information systems and mining - Volume Part I
ThresPassport – a distributed single sign-on service

ICIC'05 Proceedings of the 2005 international conference on Advances in Intelligent Computing - Volume Part II
O2O: virtual private organizations to manage security policy interoperability

ICISS'06 Proceedings of the Second international conference on Information Systems Security
The benefits of understanding passwords

HotSec'12 Proceedings of the 7th USENIX conference on Hot Topics in Security

Quantified Score

Hi-index	4.10

Visualization

Abstract

Part of its .NET initiative, Microsoft's set of Web services includes .NET Passport, a password-based user authentication and single sign-in service. The system offers a simple and sufficiently secure alternative to privilege-management infrastructures and public-key infrastructure for many applications and services.Released in 1999 and used in many Web-based applications and services, .NET Passport and its SSI service have been criticized for poor security and privacy. Its centralized nature makes it possible that other problems and security breaches will occur.