Barge - Thank you for your comments. A part of me expected them to come. Don't ask me why. Anyway, I don't know how to say this in a way that you'll be okay with, but let me try once, at least.
Interoperability has been your mantra for quite some time now. However, we are a far cry from interoperability yet, just like we were about a year ago when I told you that web-services was still a ways off from being realized.
In order to have interoperability (by definition) you have to have at least two (count em) trusted devices or platforms that can interoperate with each other in the manner you're attempting to lay out. Today, there are no TANs interoperating with TPMs in production. The closest thing that you have to interoperability in production today is a CRM package, middleware, and websphere all working together with a data warehouse and some first generation business rules.
In other words, your interoperative world doesn't exist yet to support they type of Web-Services interoperability that you look forward to. That doesn't make you wrong, because this will most likely come to pass. And, I even agree that what is going on via the TCG, NGSCB, UDDI, SOAP and so on is all ground work being laid. The problem that I have with what you preach is, that even though interoperability will likely occur, you cannot tell me with any certainty (yet) what piece of that pie will be owned by whom.
Three years ago, you and I would have sworn that the Embassy Chip had to be used to even get as far as we have. We don't know who's chips are going to be used in the end (could be Waves). We don't know who's going to deliver (distribute) and lay ownership claim to the TANs yet (could be Wave). We don't know who's Secure OS we will be using 3-years from now (could be Wave's), but a good guess would be Microsoft's IMO. Wave doesn't have the resources to write an OS. Applets yes, but not the underlying Operating System.
So, my point is, that while I've always said that your dream will probably come true, it probably (in the end) won't look like the way you dream it. So why lay all of this at Wave's doorstep now? We are only a security utility solution today. Whay isn't that good enough for now?
Lastly, don't give me that people will be all over you if you write something bunk. I wrote something and no one is all over me. They should be all over you if you don't write something. You can't be just a pitcher. You gotta catch some too!
If you want interoperability in there, then I say you write it yourself. I don't feel that I will have to for another 14-18 months yet.
T123
