Debian as though cryptographic authentication mattered

This talk will cover cryptographic authentication within debian, how we can better streamline the situation for our users, minimize code, increase freedom, and help rein in the "too big to fail" members of the Certificate Authority cartel which dominates the standard cryptographic authentication model for TLS and S/MIME. I'll talk about:

cryptographic authentication agents (both per-user and per-system)

the various forms of cryptographic certification we already support in debian

minimizing and streamlining code that handles this sensitive task

making user choice easier, more understandable, and more effective across the distro

collaboration with other distros and other operating systems