3 ms·
You've just described SSL with client certificates. Works perfectly well, is extremely secure, and has an extremely bad GUI in pretty much every browser ever. (
by JoachimSchipper 15y ago
You've just described SSL with client certificates. Works perfectly well, is extremely secure, and has an extremely bad GUI in pretty much every browser ever. (It's somewhat difficult to use "on the road", but that's arguably a security feature.)
- mike-cardwell 15y agoThe only website I log in with using client certificates is https://www.startssl.com/ https://www.startssl.com/ and it seems to work quite well. The UI is pretty rubbish in Firefox though I agree. Not tried other browsers. There's an addon for Firefox called Enigform (I've not tried it out yet) which uses PGP for web authentication: http://enigform.mozdev.org/ http://enigform.mozdev.org/
- ay 15y agoI ponder the quality of the GUI is a testament to the frequency of the mechanism's use. But the worse GUI is arguably better than no GUI at all: http://code.google.com/p/android/issues/detail?id=8196 http://code.google.com/p/android/issues/detail?id=8196 and http://stackoverflow.com/questions/357491/iphone-client-certificate http://stackoverflow.com/questions/357491/iphone-client-cert... So, for the purposes of the growing mobile browser market (where having this would be the biggest benefit IMO), this is not applicable. Which is a bit unfortunate.
- count 15y agoEasy to use on the road - don't use soft certs, use a smartcard! Works for every DOD network user around the world today...