3 ms·
Why are we inventing new authentication methods? Client certificates would be perfect, but browsers must provide an automatic way to generate key pairs.
by alexchamberlain 14y ago
Why are we inventing new authentication methods? Client certificates would be perfect, but browsers must provide an automatic way to generate key pairs.
- icebraining 14y agoHow would one authenticate from two different devices? Moving certificates around has plenty of issues.
- callahad 14y agoYou could have the certificate follow the device, rather than the user.
- icebraining 14y agoIf the certificate is device-bound, then how do you authenticate from another device?
- alexchamberlain 14y agoDON'T MOVE CERTIFICATES. You need another way of authenticating someone as well, whether it by SMS, biometrics or passwords. Client-side certificates can be used as one-part of two-factor authentication or on their own depending on the level of security needed. Oh, and btw, DON'T MOVE CERTIFICATES!