4 ms·
TLS already has client side authentication baked in, it's just that no one really uses it or even knows it exists. Most (all?) browsers support it. https://abo
by Grimburger 5y ago
TLS already has client side authentication baked in, it's just that no one really uses it or even knows it exists. Most (all?) browsers support it.
https://aboutssl.org/ssl-tls-client-authentication-how-does-it-works/ https://aboutssl.org/ssl-tls-client-authentication-how-does-...
- _wldu 5y agoYes. Mutual TLS. But that involves certificates, potentially CAs, dealing with certificate expirations and other PKI formalities. Any user can generate an Ed25519 key pair, base64 encode the public part of the key and register that with websites. It's more informal than TLS certificates and totally user controlled. I do use TLS client certificates (with several APIs) but I don't consider them as password replacements (which is the goal of ed25519-login).