3 ms·
Yes, it is hard, and the UX is horrible. Google proposed, and Chrome implements, Origin-Bound Certificates (http://www.czeskis.com/research/pubs/tls-obc.pdf ht
by jiveturkey 9y ago
Yes, it is hard, and the UX is horrible.
Google proposed, and Chrome implements, Origin-Bound Certificates (http://www.czeskis.com/research/pubs/tls-obc.pdf http://www.czeskis.com/research/pubs/tls-obc.pdf) which are just about as good and with no UX impact. Section 8 covers many of the problems with TLS client certs.
AFAIK Chrome has the only implementation of OBC.