Well I have to say I'm impressed both this afternoon and even more so later 
this afternoon - since this morning depressed me.

This morning:-
  2 years ago, I know dominated muscle applet, muscleshell, various tools for 
GP loading, and GP command sets for its fancy security features such as DAP and 
receipts. I know I also dominated T0 over CCID firmware for 8051 uPs, and 
various bits of microcodable verilog to support fancy crypto modes in the ATMEL 
ICC's 16 bit crypto co-processor,  we used once to use. Having left this 
project, 2 years later I return to its src tree - and its  just a load of  
mumbo-jumo of various tools, old compilers by firms that no longer exist, and 
scripts in 9 toolchains, A bit of openssl here, a win32 port of muscletool 
there, an atmel load script for promming micros, loadfile for starting up a 
COS, scripts to personalize muscle applet, along with various simulations.

  I could not make head or tail of it despite being the programmer of it all) !

  Not happy (with myself).
This afternoon:-
  So using Vista SP1 and an old SCM cardreader which received auto-updated 
firmware/drivers,  I went to the identityalliance.com site, and installed its 
download package. Then I stuck in my really old JCOP21 javacard democard from 
IBM Zurich and use the idalliance tool's profile menu to configure it (as a 
musclecard). 60s later, its done . I even set easily a new admin and user pin. 
Even set a password in the password store.

  So, on a roll, I went using the same vista host to the openid.trustbearer.com 
and and registered this card - enrolling it with my trustbearer openid. 60s 
later, I have an SSO-capable token.

  I'm http://openid.trustbearer.com/home_pw. What else?!!

  Perfect. No fuss (and no compiling required of 2 year old code that I cannot 
fathom any longer).

Later this afternoon (now that I'm feeling lucky and cared for):-
   I use task manager to kill my locked up IE7 (sob). Oh well, it happens 4 
times a day with or without smartcard installs!

  So I go to http://www.plaxo.com/openid to use my new found capabilities. 
First I remove my old jcop 21 with its old musclecard applet from the old SCM 
reader.

  plaxo redirects the browser to trustbearer, which prompts me to insert a card 
(after an activeX download). Perfectly reasonable. So I do as asked and it them 
prompts me for a pin: which I enter. All perfectlty normal and expected.

  trust bearer redirects me to plaxo, which now asks me to bind to my asserted 
openid to the plaxo account, given I have a verified id assured as 
multi-factor-hardware!

  Perfect. It was all seemless, first time through.
Peter.





_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to