3 ms·

smtp servers shouldn't have been doing this anyway... the pki separation is good.

• devrandoom 1y ago
  Why?
  • arccy 1y ago
    For a server auth cert, you validate that the thing you connect to has a cert for the same name. For a client cert issued by web pki, all you know is that they've somehow obtained a cert for some name, you don't know if it's legit or not, since it doesn't come from connecting to the name. So kind of useless for trust.