External signature service

[dariocast]

I noticed pymdoccbor supports HSM-based signing (though the process isn’t entirely clear).
Is it possible to use an external signing service instead—just to generate the signature—and then append that signature to the CBOR object?

[peppelinux]

it is technically possibile

it must be implemented

it could became a plugin system where implementers could be able to register their own pluign (external package) and the current crypto approach (local keys) could be moved to a plugin, the default one

[peppelinux]

see https://github.com/search?q=repo%3AIdentityPython%2FpyMDOC-CBOR%20lib&type=code