Re: U2F and keygen

On 2014-07-20 18:42, henry.story@bblfish.net wrote:
>
> On 20 Jul 2014, at 18:33, Anders Rundgren <anders.rundgren.net@gmail.com> wrote:
>
>> On 2014-07-20 18:17, henry.story@bblfish.net wrote:
>> <snip>
>>> The important thing is that it is in the html5 standard
>>>
>>>    http://www.w3.org/TR/html5/forms.html#the-keygen-element
>>>
>>
>> Why it that?  Microsoft doesn't care and neither does Apple (for iOS).
>
> I don't care that microsoft does not care since I can work around it
> using ActiveX. And for iOS I can find solutions that work around that problem
> too.
>
> In the end if we have enough killer apps we can get users to vote with
> their feet. But for the moment we don't so we do with what we have got,
> which as it turns out is enough to get going.

I don't see users as a particularly big force here.  IMO, they are rather
victims of poor designs and systems.

>
>>
>>> With JavaScript you can easily work around the  Microsoft exception by
>>> calling their ActiveX extension.
>>
>> The problem (for WebID) is that this won't be the case of U2F since
>> it was designed from the ground-up with interoperability in mind.
>>
>> If we for a moment forget the fact that only Google is allowed creating
>> new authentication schemes, do you have any objections to the following?
>>
>> http://lists.w3.org/Archives/Public/public-webid/2014Jul/0049.html
>
> I don't see why I should have anything against it.

I mean, would it work?


> How would it benefit me now?

Not a single bit.


> How would it benefit me long term?

U2F is *not* PKI.  PKI is what European and Asian banks and governments
use and want to continue with.  Most of them also want to get away from
the proprietary systems they use today.

That is, there's already a considerable user-base which (silently) is
waiting for improvements in this space which WebID could leverage on.

But it seems that my statement that only Google can succeed with
schemes requiring platform updates indeed is true.  The WebPayment
group is in exactly the same s**t if that makes you happier :-)

Anders

>
>>
>> Anders
>
> Social Web Architect
> http://bblfish.net/
>

Received on Sunday, 20 July 2014 16:57:16 UTC