OpenPGP Card

Alon Bar-Lev alon.barlev at gmail.com
Wed Sep 7 09:43:34 CEST 2005


 David Picon Alvarez wrote:

> Options 4 and 5 are much preferable to option 0 (GnuPG implements PKCS#11
and people use non-free drivers) and not implementing
> PKCS#11 might put some optimizing pressure in this direction.

Again, you are wrong.
There is not point in writing a low level code in each application to
support each card it is NxN situation, not wise.

Had you written that if vendors would have published their low-level
interface, which is expected to be different since every one offers a
different set of features, and someone would have written a GPLed PKCS#11
provider for each card, I could almost agree with you that this is the right
way to go...

Why almost?
Since the software you are communicating with, which runs on the smartcard
device, is proprietary... And I am completely not agree with you that there
is a difference between sending proprietary APDUs or using an API.

I think you reach the same state no matter how you look on it.

I am still waiting for FSF response, does anyone knows someone there how can
help in resolving this issue?

Best Regards,
Alon Bar-Lev.




More information about the Gnupg-users mailing list