4 ms·
Considering how macOS/iOS will start synchronizing Webauthn tokens, I don't think S/MIME would be that difficult really. Email-validated certificates would be a
by Avamander 4y ago
Considering how macOS/iOS will start synchronizing Webauthn tokens, I don't think S/MIME would be that difficult really. Email-validated certificates would be a nice start, but even those are expensive right now.
Identity-validated is indeed administratively harder, though in my opinion that part should be done by the state/country authorities - digital driver licenses, state ID's and national ID's could just have that as well. Some EU countries have done exactly that, but software support is lacking.
- jcims 4y agoI helped deploy a Verisign affiliate in Australia that had planned to do just that. I believe the post office was going to be the registration authority to vet users identity, and then there was going be some mechanism to issue a subscriber certificate from there, maybe on a smart card. This was 20 years ago, no idea how far it got. The physical security they built into the facility housing the root CA was pretty intense.