[KEYPROV] NSTIC - National Strategy for Trusted Identities in Cyberspace

[Anders Rundgren <[e-mail]>]

http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspace

    "For example, no longer should individuals have to remember an 
ever-expanding
     and potentially insecure list of usernames and passwords to login 
into various
     online services"

    "...a digital certificate on their cell phone..."

For once a government plan that doesn't propose a singular solution 
addressing a fraction of a user's need for authentication on the Internet.

It will be challenging though since there is no *usable* way getting 
certificates in phones not to mention that smart cards cannot be 
provisioned on-line using the software provided by the great US platform 
vendors like Microsoft, Apple and Google.

If this initiative is properly run it could (unlike their EU 
counterparts) actually become the foundation for the rest of the world.

Although it may be premature I think that enhanced USB memory sticks is 
a more viable approach than eID.  You don't need a photo-ID on the 
Internet.  USB memory sticks can host any number of credentials and is 
something people actually buy for their own money.

Ladies and Gentlemen, let the fun begin!

Anders