[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [ossig] MyKad issues and 'licensing' fees?
I hear lots of stuff on this thread.
So what plans are there with or without licensing? Even if its in the public domain doesnt it mean that they can earn from other sources than direct licensing?
-----Original Message-----
From: owner-ossig@mncc.com.my [mailto:owner-ossig@mncc.com.my]On Behalf Of Seah Hong Yee
Sent: 26 September 2003 09:36
To: ossig@mncc.com.my
Subject: Re: [ossig] MyKad issues and 'licensing' fees?
On Friday 26 September 2003 9:17 am, Chong Tsewai wrote:
> Over at FOSSCON, ivest guys were demoing IVEST on linux. It is
> basically a local proxy which reads the card and initiates TLS/SSL
> connection with any website. It shud work on any linux "desktop" or
> "server".
I wonder why the guy is ACM told me otherwise... strange.
>
> Maye the licensing fee has to do with using their lib for development of
> IVEST aware applications. As far as I can see, the only app they have is
> the secure mail via web. Wonder what plans they have to up the usage of
> ivest??
>
> Mukhsein Johari wrote:
> >>I had the same experience during ACM 2003. So far,
> >>what they are saying is,
> >>it will work on Linux "server" not desktop.
> >>Furthermore, the licensing fee
> >>for the whole setup is really prohibitively high in
> >>my opinion. In other
> >>words, this will be something more for big large
> >>corporation, for small to
> >>medium size companies, this is definitely out of
> >>reach.
> >
> >What is this licensing fee? What is the license for,
> >exactly? I thought the guy Imran emailed said the
> >specs are in the public domain?
> >
> >On the server-side, it's actually simpler - you just
> >need to integrate with the network of Cert.Auth. and
> >Reg.Auth. servers. Basic PKI stuff. Remember, you too
> >can be a (albeit unrecognized) CA using OpenSSL.
> >In Malaysia, the recognized CA is Digicert. AFAIK.
> >
> >Now, on the client-side, things are much more
> >comlicated. You need drivers for at least 1 model of
> >card reader (PS/SC type) and then you need the glue
> >that communicates between the card's PK app and your
> >app. (eg. you have an OOo doc and you want to sign it,
> >you want to sign email with mozilla mail etc.)
> >
> >What I'm not sure about is the API to get at the cert
> >on the MyKard, _after_ you have a working driver. Plus
> >I still need to read up on the detailed mechanics of
> >the sign-verify process as implemented here. Not sure
> >when I'll have the time to do that.
> >
> >***start_rant***
> >Isn't it bloody time we really go paperless?
> >After all, the only thing that absolutely requires
> >paper these days is that which inherently requires
> >signatures. eg. loan applications, divorce papers etc.
> >
> >With government-backed PKI, suddenly there's no real
> >need for paper anymore since the digitally signed docs
> >are as legally binding as pen-paper-ly signed docs. NO
> >MORE "Please download the .doc file, print it out,
> >fill it and sign it" nonsense that we currently have
> >today.
> >***end_rant***
> >
> >So...back to my question. What is this license for?
> >where does it fit in?
> >
> >__________________________________
> >Do you Yahoo!?
> >Yahoo! SiteBuilder - Free, easy-to-use web site design software
> >http://sitebuilder.yahoo.com
> >
> >
> >------------------------------------------------------------
> >To unsubscribe: send mail to ossig-request@mncc.com.my
> >with "unsubscribe ossig" in the body of the message
>
> ------------------------------------------------------------
> To unsubscribe: send mail to ossig-request@mncc.com.my
> with "unsubscribe ossig" in the body of the message
------------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message
---
CONFIDENTIALITY NOTICE & DISCLAIMER
This email and any attachment may contain confidential, privileged content and/or copyrighted information of APIIT SDN BHD ('Message'). If you are not the addressee indicated in this Message (or responsible for delivery of this Message to such person) any use, disclosure, retransmission or dissemination of this Message or any part thereof is strictly prohibited. If you have received this in error, please notify the sender immediately by return e-mail and delete this Message from your computer. Take note that any privilege or confidentiality attached to this Message is not waived, lost or destroyed due to this disclosure. Whilst all care has been taken, APIIT SDN BHD's management disclaims all liability for loss or damage to person or property arising from this Message being infected by computer virus or other contamination. Opinions, conclusions and other information in this Message that do not relate to the official business of APIIT SDN BHD shall be understood as neither given nor endorsed by APIIT SDN BHD.
---
------------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message