Il 26/04/2011 12:41, Anders Rundgren ha scritto:

> I don't know what you had in mind with an "USB P11 token"
> but in case you would like to participate in an effort
> making sort of a USB P11 token there is already a project
> to dig in to:
> http://webpki.org/auth-token-4-the-cloud.html
Interesting. Didn't know about it. Seems a bit resource-constrained at a
first look, but worth a deeper exam.

> Just drop me a line if you are interested.  I'm particularly
> interested in USB, P11, Mac, Electronics, and Browser competences.
Always interested in all what's security-related.

> An unusual (unique?) aspect of the mentioned project is that
> it is designed to be integrated in browsers.
It aims at "client" security. My target is server security, so I don't
have to leave .key files around. In case of server compromission, I only
have to reinstall it, w/o having to revoke its certs.
Actually, sort-of TPM module (I could even use TPM, but it's only
available on some motherboards :( and I don't know how fast it can be).

> Although maybe not exactly what you guys are looking for, the
> prime target for the project are people who are NOT interested
> in security or at least know very little about it!  Since they
> represent 99% of all users it looks a bigger market :-)
They're not interested as long as theyr money isn't affected. If their
money gets affected, then they become really interested :)
My project is surely heavily overkill for a client. Just like a simple
smartcard is not enough to handle SSL hanshakes on a (moderately to
heavily) busy https server.

BYtE,
 Diego.
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to