[security-services] SAML, Passport, Kerberos & Liberty Alliance

Happy Christmas everybody!

Could any of you knowledgeable persons out there write and publish
some kind of write-up, where the characteristics and links between
the things mentioned on the subject line are described?  I think the market
is getting more and more confused every day.  Even as a technologist, I
have some problems understanding the distributed Kerberos model as in
the federated Passport, and how trust is [technically] propagated in such
networks.  And where PKI comes in.  BTW, does Kerberos thwart
Dug Song's MITM attack that is a threat to SAML 1.0, Passport 1.X, etc. ?

Best Regards
Anders Rundgren
CEO X-OBI