Christopher Allen has written an interesting essay on the stagnating state of the digital security industry, pointing out the places where things are moving forward (SAML for example) and offering some insight on why it has happened.
He also has some ideas on how the industry might re-invigorate itself including work on reliability (I can see people being interested in technology employing multiple keys where all keys are not required for data access) and federated identity (I believe this is desperately needed).
Well worth reading.
Posted by Dave at March 14, 2004 11:38 AMThanks for the great link. I've never seen the security industry in that light before, and I'll never see it in the same light again.
It is interesting to note that progress is being made in those areas which the digital security industry left to other groups in the computing field.
I also wonder what effect the crack down by the RIAA will have on personal encryption technology.
See RIAA Succeeds Where the Cypherpunks Failed
for more in this vein.
Not a problem Joshua, glad you enjoyed it. I must admit that I was particularly intrigued by the idea of using multiple keys, and having some control over how many keys must be present to unlock the secret.
Seems like a perfect match for certain types of corporate data, especially if you can relatively easily revoke and add keys. Sarbanes-Oxley (aka SOX) is going to drive a need for some of these types of products over the next couple years.