4 ms·
HSPD-12 largely abolished passwords as authenticators throughout the executive branch.
by rkeene2 8y ago
HSPD-12 largely abolished passwords as authenticators throughout the executive branch.
- LinuxBender 8y agoHopefully all of their authentication methods are hosted in-house, on-prem and not outsourced or outside of secure boundaries. Everything has a back-door these days and leaks like a waterfall. :-)
- rkeene2 8y agoA lot of the authentication is TLS client certificate authentication, SAML hosted by internal SAML IdP systems (such as ADFS) for web stuff. For most other things Kerberos (via PKINIT) is used. SSH authentication X.509 using PKIXSSH is rarely used since it is not a standard part of any operating systems used. For SSH, typically either Kerberos or SSH keys based on the RSA keys used by the certificates.