3 ms·

Playing with NetBSD the other day, and bored, I created an SSH key for the first time and was amazed that I had not been using this for forever. I think keys co

Playing with NetBSD the other day, and bored, I created an SSH key for the first time and was amazed that I had not been using this for forever. I think keys could replace passwords, or at least, cookie based logins.

bajsejohannes 12y ago
Client-authentication has actually been supported in SSL for a long time [1]. Unfortunately, there seems to be little interest in using that form of authentication in browsers. A big part of that is probably making a compelling user interface and teaching users how it works. [1] https://en.wikipedia.org/wiki/Transport_Layer_Security#Client-authenticated_TLS_handshake https://en.wikipedia.org/wiki/Transport_Layer_Security#Clien...
- nairboon 12y ago
  [1] summarizes why TLC client auth isn't wide spread, but he also proposes some TLS extensions to improve client auth. Such as Origin-bound certificates [2] so that the user does not have to choose which certificate to use for authenticating. [1]: http://www.browserauth.net/tls-client-authentication http://www.browserauth.net/tls-client-authentication [2]: http://www.browserauth.net/origin-bound-certificates http://www.browserauth.net/origin-bound-certificates