4 ms·
As far as I can tell, client certs can't be cross-device. You would need a new cert on every device you plan to use with the site.
by bsilvereagle 13y ago
As far as I can tell, client certs can't be cross-device. You would need a new cert on every device you plan to use with the site.
- dmix 13y agoI've used PGP keys cross-device (using both android and osx clients), why can't SSL?
- geofft 13y agoYou can export and import certs between devices, the UI is just awful. Possibly more awful than all the PGP UIs, if such a thing is possible. Certainly you can't drive this flow from the website alone. The best you can do is point your users at various browser-specific instructions.
- zaraflan 13y agoAt which point you're back to the same basic problem with passwords: the weakest link and root-problem is the average user's lack of knowledge. There wouldn't be such a mad scramble to find a decent alternative to passwords if everyone was using KeePass or the like, and no alternative is going to be near-future viable if it relies on something too complicated for the nearly-everyone who isn't using strong generated passwords. 2FA is working because all the user has to do is get a text. Anything beyond that level of difficulty is simply a non-starter at this point.
- jlgaddis 13y agoIt depends if the certificate is marked as "exportable". If it is, then it can be moved/copied.