4 ms·
I thought client certificates were being phased out, didn't Chrome just remove the <keygen> html tag?
by 0x0 11y ago
I thought client certificates were being phased out, didn't Chrome just remove the <keygen> html tag?
- sjtgraham 11y agoA PKCS#10 request is built using PKI.js, all crypto is done by native WebCrypto APIs.
- kaeso 11y agoKind of. Starting from 49, the <keygen> feature needs to be whitelisted per web-site. Client certificates are not anymore imported automatically, only downloaded (user action needed to load into the keystore).
- supergeek133 11y agoYou're going to see a lot more of this, especially in the IoT world. PKI is becoming a requirement.
- j_s 11y agoRecently I've heard rumblings that HTTP/2 somehow doesn't support client certificates. Can anyone point me to more information on this issue? https://news.ycombinator.com/item?id=11556762 https://news.ycombinator.com/item?id=11556762