5 ms·
Obscure is not on the list in GP's quote, and afaik client authentication is none of the things in that list. It's actually used a fair bit in uses of TLS that
by stormbrew 10y ago
Obscure is not on the list in GP's quote, and afaik client authentication is none of the things in that list. It's actually used a fair bit in uses of TLS that are not the open web.
- bluejekyll 10y agoYes. I've implemented client-auth with a private CA, specifically to authenticate services to each other. It's a very handy tool when you have disparate networks.
- spilk 10y agoComing from a US DoD background, TLS client authentication is mandated for nearly everything. Everyone carries keypairs around their neck on their ID card (PIV smartcard with x.509 certificates)