3 ms·
> Remember that SSL encrypts network traffic, but does not supply authentication. SSL is also not a replacement for 2FA. False and false.
by Puts 10y ago
> Remember that SSL encrypts network traffic, but does not supply authentication. SSL is also not a replacement for 2FA.
False and false.
- jankedeen 10y agoAre you referring to something like SRP+DSS|RSA? Not widely supported but I've used it via gnutls as a custom auth proxy layer for various things. 1password uses something like this iirc. A really simple TFA pattern with SSL enabling is requiring a signed client cert with additional directory services auth (or even basic auth).