3 ms·

I did use client side certificates for a while. It's a real pain to get the certificate installed, as it is different per OS and browser. And I wouldn't call i

by LeonM 8y ago

I did use client side certificates for a while. It's a real pain to get the certificate installed, as it is different per OS and browser. And I wouldn't call it 'really secure', I'd say it's just as secure as any other client side secret.

Boulth 8y ago
> And I wouldn't call it 'really secure', I'd say it's just as secure as any other client side secret. Only if you store the cert in a file, but you can store it on a smartcard (e.g. Yubikey) or a TPM.