Re: [ossig] MyKad issues and 'licensing' fees?

[Seah Hong Yee <hongyee@polyscientific.com.my>]

>
> What is this licensing fee? What is the license for,
> exactly? I thought the guy Imran emailed said the
> specs are in the public domain?

No idea, I merely asked for the cost during ACM 2003 and was told for my 
organiztion, it would cost somwhere around 50-70K. 

>
> On the server-side, it's actually simpler - you just
> need to integrate with the network of Cert.Auth. and
> Reg.Auth. servers. Basic PKI stuff. Remember, you too
> can be a (albeit unrecognized) CA using OpenSSL.
> In Malaysia, the recognized CA is Digicert. AFAIK.
>
> Now, on the client-side, things are much more
> comlicated. You need drivers for at least 1 model of
> card reader (PS/SC type) and then you need the glue
> that communicates between the card's PK app and your
> app. (eg. you have an OOo doc and you want to sign it,
> you want to sign email with mozilla mail etc.)

I think one of the "certified vendor" for e-perolehan does sell card reader 
that works on linux. 


>
> What I'm not sure about is the API to get at the cert
> on the MyKard, _after_ you have a working driver. Plus
> I still need to read up on the detailed mechanics of
> the sign-verify process as implemented here. Not sure
> when I'll have the time to do that.
>
> ***start_rant***

Well, since it is rant

> Isn't it bloody time we really go paperless?
> After all, the only thing that absolutely requires
> paper these days is that which inherently requires
> signatures. eg. loan applications, divorce papers etc.
>

Er.... not sure, but I still find myself giving out photocopy of my IC every 
now and than. So much so that I actually have a stack of these ready to be 
given out like my business card.  

You need to provide photocopy of IC when you

	1) apply for a phone line
	2) apply for streamyx
	3) ask for a replacement sim card on your cell phone
	4) apply for a bank account
	5) buy a car
	6) buy a house

Actually come to think of it, I spend a lot of time waiting in line also, 
sometime for really dumb thing like apply for a phone line and electricity. 
In PUAS counter in Jalan Templer, I used to have to visit that office 4 times 
in 1 week just to get a meter installed. 

Another thing is, given the fact that your IC store your digital certificate 
you shouldn't be giving out your I/C to anyone. However, in Malaysia today, 
when you visit some companies, you have to surrender your I/c to get 
visitor's pass. Ironically, most govt building in Putrajaya require you to do 
that. (Even more ironic, the guard who guard entry to Ministry of Labour was 
Indonesian the last time I visit the place.)


> With government-backed PKI, suddenly there's no real
> need for paper anymore since the digitally signed docs
> are as legally binding as pen-paper-ly signed docs. NO
> MORE "Please download the .doc file, print it out,
> fill it and sign it" nonsense that we currently have
> today.

Er.... a good place to start is MyNic, to change your DNS entry, you need to 
do just that, and they will reject your application for even very minor 
error. 


> ***end_rant***
>
> So...back to my question. What is this license for?
> where does it fit in?
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>
>
> ------------------------------------------------------------
> To unsubscribe: send mail to ossig-request@mncc.com.my
> with "unsubscribe ossig" in the body of the message


------------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message