Call to Action

• You should seriously consider using CardSpace in your Web-based application whether it’s a Web site or a smart client using Web services. CardSpace helps mitigate one of the most serious Internet crimes today–phishing. At the very least, you should use Card-Space as a user and then download the sample code and start experimenting.

• If you built a GINA in the past, it will no longer work on Windows Vista, so it is important to understand the new Credential Provider model and replace your current code with the new COM interfaces.

• If you’re using service-specific SIDs for your service’s resources, as we recommended in Chapter 5, be sure to consider how you’d like to handle owner rights when building your access control lists.