Re: Pre-provisioned Keys? No, the Platforms aren't ready

On 2012-12-02 01:58, Mike Jones wrote:
> +1
> 
> (and add most Internet-connected gaming consoles to this "exception" list as well)

The Netflix use-case presumes that the service provider is directly involved in
device personalization and/or manufacturing which IMO seems like a task for the
streaming media industry in the same way as the satellite folks created a bunch
of standards for subscriber cards and media encryption.

Anders

> 
> -----Original Message-----
> From: Mark Watson [mailto:watsonm@netflix.com] 
> Sent: Saturday, December 01, 2012 4:40 PM
> To: Anders Rundgren
> Cc: public-webcrypto-comments@w3.org
> Subject: Re: Pre-provisioned Keys? No, the Platforms aren't ready
> 
> When you say 'with Netflix as an exception', you should say 'with any high quality commercial video service as an exception'. The requirements that lead us to need pre-provisioned keys are not mainly of our own making and others are subject to the same constraints. You're talking about millions upon millions of devices, billions of hours of streaming, 30-40% of all peak hour Internet traffic (in the US).
> 
>  Just a small 'exception'.
> 
> ...Mark
> 
> Sent from my iPhone
> 
> On Dec 1, 2012, at 6:41 AM, "Anders Rundgren" <anders.rundgren@telia.com> wrote:
> 
>> One more reason for dropping pre-provisioned keys from the charter is 
>> that almost all existing uses of pre-provisioned keys (with Netflix as 
>> a notable exception) involve PIN-protected keys which isn't supported 
>> by any of the current mainstream computing platforms unless you add specific middleware and/or externally configured crypto hardware.
>>
>> Anders
>>
>>
> 
> 
> 
>

Received on Sunday, 2 December 2012 05:20:44 UTC