Re: [lamps] On the need for standardization of software-based interoperable private keys [was: Re: draft-ietf-lamps-samples: PKCS12 expertise needed (including objects for comparison)]

[Michael Richardson <[e-mail]>]

On 2021-08-05 8:52 a.m., Carl Wallace wrote:
> Given everyone has a hardware crypto module in their pocket these days 

yes, me.  I don't use it much, and not for email at all, although I 
guess it is supported.  I am hesistant because I don't know how to 
recover from loss of token.

But, nobody I know who isn't working at a big company/government has 
one.  And few of them either.

I'm not saying it couldn't change, but I think your assertion is not true.

> and setting aside key escrow concerns, another way to get at this would 
> be to encrypt for more than one key and forego exporting and sharing 
> keys. That might not even require new protocol work but just better use 
> of what we have now.
> 

I share your aspiration.