Peer-to-peer authentication and authorization

A computer-readable medium having computer-executable instructions for authorizing a user at a first computing device to access a trusted resource at a second computing device, the computer-readable instructions performing steps comprising:

• receiving, from the user, a request to access the trusted resource on the second computing device;
• changing a password element of a user account on the second computing device based on a certificate of the first computing device stored in a trusted people store of the second computing device;
• logging into the user account using the changed password element, thereby generating a token;
• accessing the trusted resource with the token;
• and
• providing the results of the accessing to the user at the first computing device.

A computing device comprising:

• a trusted root store comprising different signed certificates than a trusted people store;
• the trusted people store comprising signed certificates of entities deemed by a user of the computing device to be trustworthy, the signed certificates having been placed in the trusted people store under the direction of the user;
• a network interface, the network interface performing steps comprising:
• receiving one or more certificates from another computing device;
• and
• a processing unit, the processing unit performing steps comprising:
• determining, prior to using a root store, if any of the certificates of the one or more certificates contains an identifier corresponding to a certificate contained in the trusted people store, authenticating the first computing device if any of the certificates of the one or more certificates contains an identifier to a certificate contained in a trusted people store, and otherwise authenticating the other computing device if a last certificate of the one or more certificates is signed by a trusted people store entity, wherein the trusted people store entity is identified by a signed certificate in the trusted people store, if a first certificate of the one or more certificates identifies the other computing device, and if each certificate of the one or more certificates is authenticated by a preceding certificate of the one or more certificates.