4 ms·
I experimented with an alternative HTTP authentication scheme (like basic or digest, using the "WWW-Authenticate" header) that used ssh keys to authenticate the
by thwarted 11y ago
I experimented with an alternative HTTP authentication scheme (like basic or digest, using the "WWW-Authenticate" header) that used ssh keys to authenticate the client. Some of the idea was based on this Joyent blog [0] post about signing the date header, but more robust and meant for a user rather than scripted access. The idea was that the browser would interface with a specific ssh-agent with specific keys loaded for specific sites.
Unfortunately, I didn't get very far and stopped working on it a while ago, but one thing I did learn was that the source code for links was much easier to come up to speed on and use for rough experiments than the source code for a full-on graphical browser.
I still have notes for it... somewhere.
[0] http://joyeur.com/2012/01/03/a-bit-more-about-the-new-joyent-cloud-api/ http://joyeur.com/2012/01/03/a-bit-more-about-the-new-joyent...