Re: [cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-25 Thread Peter Gutmann
Paul Walker p...@blacksun.org.uk writes: I'm curious which bits you feel Apple got right with the Keychain - not because I disbelieve you, but because I don't know. :-) Have you got any links or documents, either for what they did right or for what the others do wrong? Link sent off-list.

Re: [cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-25 Thread Jeffrey Goldberg
[Posted to list only] On 2013-03-25, at 8:02 AM, Peter Gutmann pgut...@cs.auckland.ac.nz wrote: Another nice thing Apple have done, which no-one else has managed so far, is to get people to actively use the Keychain API and capabilities. I just looked in my login (default) OS X Keychain for

[cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-22 Thread Paul Walker
Hi Peter, In a perfect world, yes. However having an OS-provided, standardised mechanism that gets things mostly right (Apple Keyring) is far, far better than forcing every developer to invent their own one (Unix and to a lesser extent Windows), which 90% will get wrong. I'm curious which