Re: [Opensc-devel] Android 4.3 Hardware-Backed Security Features

[Anders R. <and...@gm...>]

On 2013-08-29 14:58, Jean-Michel Pouré - GOOZE wrote:
<snip>
> 
> Thank you again for this interesting article, which convinced me to
> avoid any management of certificates over Internet. 

JM, actual *usage* of certificates issued over the Internet in the
EU already exceed that of smart cards for the reasons I have mentioned
over and over: the lack of usable standards that doesn't require
end-users to hang out in OpenSC list...

> So the future belongs to smartcards and USB tokens.

For e-passports and governments, yes.  For the private sector
including banks the future looks awfully grim unless Feitian
and other vendors begin to take the threat from Google a bit
more serious.  My guess is that they probably will wait until
it is all over.

> We draw a different conclusion as
> yours. And this is still needed to register cryto-chips at ANSSI,
> France, for security and also freedom.

The French crypto-laws are bizarre IMO.  I'm moving to France
in September :-)

Cheers
Anders

>