leastprivilege.com
Token Decryption Service for CardSpace
Web Applications that want to decrypt CardSpace tokens need read access to the SSL private key. But you would increase your attack surface tremendously if you directly grant this access to the work…