Re: [ossig] MyKad issues and 'licensing' fees?

[Seah Hong Yee <hongyee@polyscientific.com.my>]

On Friday 26 September 2003 9:17 am, Chong Tsewai wrote:
> Over at FOSSCON,  ivest guys were demoing IVEST on linux. It is
> basically a local proxy which reads the card and initiates TLS/SSL
> connection with any website. It shud work on any linux "desktop" or
> "server".

I wonder why the guy is ACM told me otherwise... strange.

>
> Maye the licensing fee has to do with using their lib for development of
> IVEST aware applications. As far as I can see, the only app they have is
> the secure mail via web. Wonder what plans they have to up the usage of
> ivest??
>
> Mukhsein Johari wrote:
> >>I had the same experience during ACM 2003.  So far,
> >>what they are saying is,
> >>it will work on Linux "server" not desktop.
> >>Furthermore, the licensing fee
> >>for the whole setup is really prohibitively high in
> >>my opinion. In other
> >>words, this will be something more for big large
> >>corporation, for small to
> >>medium size companies, this is definitely out of
> >>reach.
> >
> >What is this licensing fee? What is the license for,
> >exactly? I thought the guy Imran emailed said the
> >specs are in the public domain?
> >
> >On the server-side, it's actually simpler - you just
> >need to integrate with the network of Cert.Auth. and
> >Reg.Auth. servers. Basic PKI stuff. Remember, you too
> >can be a (albeit unrecognized) CA using OpenSSL.
> >In Malaysia, the recognized CA is Digicert. AFAIK.
> >
> >Now, on the client-side, things are much more
> >comlicated. You need drivers for at least 1 model of
> >card reader (PS/SC type) and then you need the glue
> >that communicates between the card's PK app and your
> >app. (eg. you have an OOo doc and you want to sign it,
> >you want to sign email with mozilla mail etc.)
> >
> >What I'm not sure about is the API to get at the cert
> >on the MyKard, _after_ you have a working driver. Plus
> >I still need to read up on the detailed mechanics of
> >the sign-verify process as implemented here. Not sure
> >when I'll have the time to do that.
> >
> >***start_rant***
> >Isn't it bloody time we really go paperless?
> >After all, the only thing that absolutely requires
> >paper these days is that which inherently requires
> >signatures. eg. loan applications, divorce papers etc.
> >
> >With government-backed PKI, suddenly there's no real
> >need for paper anymore since the digitally signed docs
> >are as legally binding as pen-paper-ly signed docs. NO
> >MORE "Please download the .doc file, print it out,
> >fill it and sign it" nonsense that we currently have
> >today.
> >***end_rant***
> >
> >So...back to my question. What is this license for?
> >where does it fit in?
> >
> >__________________________________
> >Do you Yahoo!?
> >Yahoo! SiteBuilder - Free, easy-to-use web site design software
> >http://sitebuilder.yahoo.com
> >
> >
> >------------------------------------------------------------
> >To unsubscribe: send mail to ossig-request@mncc.com.my
> >with "unsubscribe ossig" in the body of the message
>
> ------------------------------------------------------------
> To unsubscribe: send mail to ossig-request@mncc.com.my
> with "unsubscribe ossig" in the body of the message


------------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message