this whole concept sounds awesome, and very secure. and from what i gather no one can hack into my remote STS or my desktop and get my sensitive info.
but one this is missing:
what keeps an attacker from creating a website that asks me for an infocard, and it requires the type that will tell them my SSN or other sensitive info?
as an example, take something that is done today:
i get an email from some spammer that says "this new great bank will pay you a zillion dollars for opening an account!" i click the link and go through the sign-up process, and up comes the infocard dialog. now as secure as this process is, this is still
a bank (or so i think), so i have to send them the kind of infocard that will tell this particular "relying party" my SSN, mother's maiden name and so on. and so now i've just handed over all my sensitive info to some attacker.
shouldn't there be some sort of authentication of the relying party, to make sure they are a ligitamate(sp?) business?