3 ms·
Technically as far as I understand the client side certificates and signing/revoking them through internal CA solve the same problems. However I have yet to en
by VTimofeenko 5y ago
Technically as far as I understand the client side certificates and signing/revoking them through internal CA solve the same problems.
However I have yet to encounter such setup used in a professional environment for humans. Is the complexity of such approach just too high compared to LDAP and the passwords?
- throwawayboise 5y agoNormal users (including some people with graduate degrees in computer science) can't manage client-side keys or certificates, as anyone who has ever had to support users using ssh key authentication knows. So then you have to provide functionality to do this for them in a foolproof and secure way, which is a big bite to chew.
- VTimofeenko 5y agoYeah, I figured the end-user support would fall under the abstract "complexity" I mentioned in my original comment. I can build a hotrod in my garage but nobody sane will use it for public transportation.