3 ms·
There's also some privacy and UX concerns with client certs. See http://www.browserauth.net/tls-client-authentication http://www.browserauth.net/tls-client-auth
by Ajedi32 10y ago
There's also some privacy and UX concerns with client certs. See http://www.browserauth.net/tls-client-authentication http://www.browserauth.net/tls-client-authentication
Personally I'd love to see UAF or SQRL take off. Lots of potential there.
- z3t4 10y agomost browsers will auto select the right cert. But for browsers that dont support the keygen tag you have to create the cert including priv key and pw. you can of course create many certs for different users, you can of course also sign them yourself, no ca is needed besides for the ssl server cert. most of the points on that site is moot besides poor support on some browsers.