Subject: [KEYPROV] XKMS, where did it go?

From: "Anders Rundgren" <[email-masked]>
Date: Mon, 6 Oct 2008 09:24:47 +0200

XKMS  ( http://www.w3.org/TR/xkms2/ ) was created by a bunch of leading companies including VeriSign, RSA, SUN, Microsoft, Oracle etc.

Although it is a really nice piece of engineering, it has failed on the market.

I believe there are a couple of reasons why this happened:

- An unclear deployment plan with respect to the client-side

- No browser interface

Unfortunately, the same situation appears to apply to KEYPROV with the added complexity that the charter talks about USB sticks, something which is fairly theoretical since there are no standards (de-facto or real) for USB containers supporting OTP, not to mention higher layers like browser integration.  That most OTP schemes truncate the output from 128-160 bits to a mere 30-40 bits (also when used programmatically), reducing cryptographic strength by a factor of 10000000000000000000000000000000000000, indicates that this product isn't even conceptually ready for prime-time.

IMHO, Microsoft's strategy for introducing CardSpace seems to be an easier way of succeeding these days, at least if you are targeting the mass-market.

Anders Rundgren

_______________________________________________
KEYPROV mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/keyprov