Re: gnome-keyring Trusted HW and Gnome Keyring

[Anders Rundgren <anders rundgren telia com>]

Stef Walter wrote:
> On 2010-12-21 06:33, Anders Rundgren wrote:
> > http://webpki.org/papers/tee-se-combo.pdf
>
> I saw the claim that keys can be restricted to applications. What kind
> of software environment is this in?

This is currently mostly just a hope :-)

I know that there are difficulties in this area. For native applications
the signer subject DN, hash of CA root, and the name of executable *could*
be a suitable foundation.

It might only happen in mobile OSes where the "app" revolution otherwise
we will get app-local key-rings which will be a PITA to provision.

I wouldn't be surprised if this feature will be a part of Windows 8.

I'm trying to figure out how to handle it in KeyGen2, my effort for
creating an E2ES (End To End Secured) universal provisioning protocol.

Cheers,

Anders

> Cheers,
>
> Stef