Viewing profile — kjetil

In the EU (and EEA), eIDAS distinguishes between - "electronic signatures", which can be any electronic data used to sign, like a drawn signature - "advanced electronic signature" …

There is actually one more way to quit vim. If you only have one window open in vim, Ctrl-W Q will exit.

In practice, though, PAdES has a lot more support and has the crucial property of being easy to view by end-users. Is there any wide use of ASiC?

The article does not mention passkeys, but they seem destined to be almost all of WebAuthn usage in the future, now that both Apple and Google support them. External FIDO keys will…

QWACs are for web sites, not users. CAs have to be audited as a TSP in order to issue them and be approved by the member state.

Are the TSP audit requirements less strict than what the browsers’ root programs require?

Not being able to automatically renew certificates seems like a rather minor point in the bigger picture. I get QWAC goes against the trend of phasing out EV certs. But isn’t the r…

Identity verification services usually combine document reading with something like a video selfie, which provides 1) a liveness check (you are a real person) and 2) a match agains…

Since the Javascript NemID client was introduced last year, most users don't need Java anymore. That's for OTP though, users with tokens or keyfile have to use the OpenSign applet …

Not to detract from your point, but the applet part of Norwegian BankID is now mostly replaced by the new Javascript-based solution.

Are you seriously suggesting that String incompatibilites are a big issues in Java? String interning is specified in the JLS: http://docs.oracle.com/javase/specs/jls/se8/html/jls-3…

Even without such vulnerabilities, I would be wary of printing out stuff from any untrusted files in a terminal. Most terminal emulators have been vulnerable to escape character at…

With love to all the UNIX apologists in this thread: you're missing the point. Why isn't software easier to install and configure? Why are we still using relics from the 70s as the…

Slightly related fun fact: Oslo also uses recovered heat from sewage to heat homes. http://www.enn.com/top_stories/article/4032

Or just use BankID for mobile or the BankID app for iOS, no need for applets.

Little known fact: the -0/-print0 idea is due to DJB.

At least on OS X you can set up an "idea" command for opening arbitrary files. Only local files though. Check the File menu.

For me it's the fingerprinting that does it. I once told an American acquaintance that US customs fingerprinted all my ten digits last time I was in the US. Her reaction: She refus…