4 ms·
Except we didn't get a separate chain - all we got is that from now on software will just ignore the "client" flag and accept the "server" flag for client purpo
by kalleboo 9mo ago
Except we didn't get a separate chain - all we got is that from now on software will just ignore the "client" flag and accept the "server" flag for client purposes, adding one more hack onto the pile of hacks that is the Internet.
- bawolff 9mo agoThat's far from clear. XMPP is still probably a minor use caee of client certificates.
- kalleboo 9mo agoYeah buy why would anyone go through the trouble of bootstrapping a whole new PKI instead of just flipping an if statement? I'm curious what other use cases there have been for domain-validated client certs aside from XMPP.