[KEYPROV] NSTIC Update - Vital Technology Still Missing

[Anders Rundgren <[e-mail]>]

http://www.nist.gov/nstic/video.html

What this esteemed bunch of people may have overlooked, is that in a world hooked on
on-line, the majority of actual uses-cases also presume on-line provisioned credentials
directly to the end-user.

However, there is no such system available today for the USB tokens and smart cards
referred to in this video; you typically need a proprietary card management system.

My personal take on this particular subject is that it doesn't make sense trying to
make a variant and often NDA-protected technology like smart cards perform tricks
that it was never designed for; it is much easier defining a "Web Token" which of
course would be completely open and only require a single device driver.

Anders