2 ms·
How would you do that? The old device doesn't know anything about the new certificate, and the new device can't prove that it's the successor to the old device.
by duskwuff 5y ago
How would you do that? The old device doesn't know anything about the new certificate, and the new device can't prove that it's the successor to the old device.
- tene 5y agoYou use some other form of authentication, like a password, or clicking an emailed link, or clicking an "approve" button on the old device if available, or anything else that makes sense for your relationship with your users.
- duskwuff 5y agoAnd how does the server remember that you've provided one of those other forms of authentication? Recall that the original goal was to be an alternative to cookies...
- pabs3 5y agoSame as how you verify the keys of another person, manually transferring the hex digits of the fingerprint, or something more user-friendly like QR codes or audio or BT data transmission.