Re: [ossig] MyKad issues and 'licensing' fees?

[Chong Tsewai <twchong@infotech-partners.com>]

Over at FOSSCON,  ivest guys were demoing IVEST on linux. It is 
basically a local proxy which reads the card and initiates TLS/SSL 
connection with any website. It shud work on any linux "desktop" or 
"server".

Maye the licensing fee has to do with using their lib for development of 
IVEST aware applications. As far as I can see, the only app they have is 
the secure mail via web. Wonder what plans they have to up the usage of 
ivest??



Mukhsein Johari wrote:

> > I had the same experience during ACM 2003.  So far,
> > what they are saying is, 
> > it will work on Linux "server" not desktop. 
> > Furthermore, the licensing fee 
> > for the whole setup is really prohibitively high in
> > my opinion. In other 
> > words, this will be something more for big large
> > corporation, for small to 
> > medium size companies, this is definitely out of
> > reach. 
> >    
> What is this licensing fee? What is the license for,
> exactly? I thought the guy Imran emailed said the
> specs are in the public domain?
>
> On the server-side, it's actually simpler - you just
> need to integrate with the network of Cert.Auth. and
> Reg.Auth. servers. Basic PKI stuff. Remember, you too
> can be a (albeit unrecognized) CA using OpenSSL.
> In Malaysia, the recognized CA is Digicert. AFAIK.
>
> Now, on the client-side, things are much more
> comlicated. You need drivers for at least 1 model of
> card reader (PS/SC type) and then you need the glue
> that communicates between the card's PK app and your
> app. (eg. you have an OOo doc and you want to sign it,
> you want to sign email with mozilla mail etc.)
>
> What I'm not sure about is the API to get at the cert
> on the MyKard, _after_ you have a working driver. Plus
> I still need to read up on the detailed mechanics of
> the sign-verify process as implemented here. Not sure
> when I'll have the time to do that.
>
> ***start_rant***
> Isn't it bloody time we really go paperless? 
> After all, the only thing that absolutely requires
> paper these days is that which inherently requires
> signatures. eg. loan applications, divorce papers etc.
>
> With government-backed PKI, suddenly there's no real
> need for paper anymore since the digitally signed docs
> are as legally binding as pen-paper-ly signed docs. NO
> MORE "Please download the .doc file, print it out,
> fill it and sign it" nonsense that we currently have
> today.
> ***end_rant***
>
> So...back to my question. What is this license for?
> where does it fit in?
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
>
>
> ------------------------------------------------------------
> To unsubscribe: send mail to ossig-request@mncc.com.my
> with "unsubscribe ossig" in the body of the message
>
>
>
>  


------------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message