Re: W3C Web Crypto WG - Take away from 22nd of July conf call

Apparently the writeup of the Korean bank-case didn't got a particularly favorable review.

If I were them I wouldn't be too concerned about that because none of the three giant US tech vendors that define some 99% of our client platforms have managed getting much acceptance for their PKI solutions by Asian and EU banks either.

In fact, most banks replace this part with a custom solution both for enrollment and authentication/signatures which also was the motivation behind the Korean bank use-case.

Somewhat related the TrustedComputingGroup (which I'm an invited expert member of),  have through their core members indirectly rejected the bank use-case.  In some way this is quite understandable since there's no paying customer out there, but it also feels slightly non-visionary because on-line banking is really just another BYOD scenario,  albeit taken to another level.

Anders

Received on Saturday, 27 July 2013 04:11:37 UTC