Progressing Pre-provisioned keys/KeyStorage etc.

Hi Cryptolovers,

Looking at the recent mail-exchanges it is  pretty obvious that this issue isn't going anywhere.

As a reference I would like to mention the fact that essentially nobody working with consumer-PKI actually use the current platforms' built-in PKI-solutions, neither for provisioning, nor for actual use of keys.
*This has been publicly known for years* but nothing seems to happen unless it is closely related to the vendor's own business activities (like the Google Wallet which have undergone three major releases in just 18 months).

The currently only related standard I'm aware of is <keygen>

     http://www.w3.org/TR/html-markup/keygen.html

which unfortunately is a completely useless toy.  Not even Apple who insisted that <keygen> became a part of HTML5 actually support it in their iOS-based products.

Therefore I think it would a better use of resources taking the pre-provisioned key discussion off-list and see if there is any ground for creating a suitable specification for possible inclusion in phase #2 of the Web Crypto.
Hoping that a consensus-based solution suddenly will fall down from the sky surely isn't the right approach.

It is also quite possible that there will be no standard solution to this issue.

Sincerely,
Anders Rundgren

Received on Friday, 9 November 2012 11:54:45 UTC