Thank you for posting the actual technical pdf, that was interesting reading > Certificate-Based Authentication Heh, so I can look forward to the biennial ban

Thank you for posting the actual technical pdf, that was interesting reading > Certificate-Based Authentication Heh, so I can look forward to the biennial banking outage as they forget to renew their certs :-D But in seriousness, I have some experience with x509 auth from the early days of kubernetes using it and unless the system has some robust CRL mechanisms I look forward to knowing how such a scheme will deauthorize users Interestingly, they also seem to be doing belt-and-suspenders since the messages themselves are signed with the private key of the institution, which appears to be registered out of band from the system itself