Re: New port in MacPorts and question about TokenD
Martin Paljak <[email protected]>
| Newsgroups | gmane.comp.encryption.opensc.devel |
|---|---|
| Message-ID | <[email protected]> |
On 28/09/16 11:34, David Woodhouse wrote: > Then you can use it with *any* PKCS#11 module, including OpenSC's. Why > have a hardware-specific Tokend implementation at all? In theory - yes. In practice - there is a shitload of weirdly buggy PKCS#11 modules out there and when you need to provide reliability, such wishful layering often fails to deliver. And you need to configure them and resolve conflicts and ... The other sad part about tokend is - it will be phased out. https://developer.apple.com/reference/cryptotokenkit Anyway, it seems that such "long layering" is something that is actively being worked against, with things like WebUSB being preferred by some implementers instead of going through whatever would provide access to hardware tokens (think: pkcs11-pcsc-ccid) Regards, Martin -- @martinpaljak +3725156495 ------------------------------------------------------------------------------