4 ms·
I use it for StartSSL. It allows me to use SSL client cert auth for their OpenID instance.[0] I use it to log into StackOverflow and a few prominent sites. I
by 616c 13y ago
I use it for StartSSL. It allows me to use SSL client cert auth for their OpenID instance.[0] I use it to log into StackOverflow and a few prominent sites. I like the idea of my cert provider being a trusted party for auth for other sites. However, trusting anyone other than himself in this post-PRISM era is probably a mistake.
[0] http://www.startssl.com/?app=14 http://www.startssl.com/?app=14
- icebraining 13y agoIt's so annoying that OpenID providers either support client certs or using your own domain, but never both!
- 616c 13y agoI have not tried both, so I did not experience this problem. I do know SSL client certs do not work well, and wanted to work on building my own solution that does what StartSSL (an OpenID endpoint with SSL-cert based authentication). Does anyone know of ways to do this?
- icebraining 13y agoNginx supports client certs[1], so I'd say the easiest way to get started is to get some free OpenID server (SimpleID[2] seems maintaned) and configure nginx to require cert authentication to access the login path. I'd do it myself, if I used OpenID more than once every two months or so. [1]: http://nategood.com/client-side-certificate-authentication-in-ngi http://nategood.com/client-side-certificate-authentication-i... [2]: http://simpleid.koinic.net/ http://simpleid.koinic.net/