Toolkit
Story: Security software edges into limelight
While the general message of this article very realistic, it is unfortunate that "PKI encryption" and PKI generally are so closely associated with the standalone, consulting-heavy PKI offerings of traditional vendors and not with lighter, more innovative and compliance-oriented security software being introduced by new players such as Tekki AB. PKI is just another IT risk management technique, but nevertheless one that plays an important and irreplacable role in certain areas. In the EU, new compliance schemes such as the e-invoicing directive generally leave businesses no choice but to deploy a form of PKI. The time has come for PKI to be demystified and the blame for its commercial malfunctioning up until now placed on the misjudgment of vendors rather than the technique itself. PKI must be easy to integrate with applications, easy and inexpensive to deploy, and it must include policy and legal document automation that allow well-targeted and customized signatures and encryption, both for external transactions and internal workflow -- if those conditions are fulfilled, PKI is a very smart way to deal with the rapidly growing body of business and legal security requirements.
Full Talkback thread



