4 ms·
I've never even heard of client authentication until recently. That's probably why.
by sdegutis 10y ago
I've never even heard of client authentication until recently. That's probably why.
- stormbrew 10y agoObscure is not on the list in GP's quote, and afaik client authentication is none of the things in that list. It's actually used a fair bit in uses of TLS that are not the open web.
- bluejekyll 10y agoYes. I've implemented client-auth with a private CA, specifically to authenticate services to each other. It's a very handy tool when you have disparate networks.
- spilk 10y agoComing from a US DoD background, TLS client authentication is mandated for nearly everything. Everyone carries keypairs around their neck on their ID card (PIV smartcard with x.509 certificates)
- johncolanduoni 10y agoIf you've ever used OpenVPN, you've used TLS client authentication. That seems like a pretty huge hole to purposely put in your feature set. I understand not implementing it yet because it's more work, but I don't get drawing a line in the sand.