Re: [cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-25 Thread Jeffrey Goldberg
[Posted to list only] On 2013-03-25, at 8:02 AM, Peter Gutmann wrote: > Another nice thing Apple have done, which no-one else has > managed so far, is to get people to actively use the Keychain API and > capabilities. I just looked in my login (default) OS X Keychain for "Application Passwords"

Re: [cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-25 Thread Peter Gutmann
Paul Walker writes: >I'm curious which bits you feel Apple got right with the Keychain - not >because I disbelieve you, but because I don't know. :-) Have you got any >links or documents, either for what they did right or for what the others do >wrong? Link sent off-list. Another nice thing Ap

[cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-22 Thread Paul Walker
Hi Peter, > In a perfect world, yes. However having an OS-provided, standardised > mechanism that gets things mostly right (Apple Keyring) is far, far better > than forcing every developer to invent their own one (Unix and to a lesser > extent Windows), which 90% will get wrong. I'm curious whic