News for hackers. Stuff that matters.

A comment on Estonia blocks electronic ID cards over identity-theft risk. Parent comment

Re:Estonia blocks electronic ID cards over identity-theft risk by j_s on Friday November 03, 2017 @09:08AM (#15618863)
This is paying for revoke checking, right?

Validating the certificate the same way servers validate client certificates should be enough to verify it as a date/time-valid Estonian ID.

[ Parent | on HN ]
Re:Estonia blocks electronic ID cards over identity-theft risk by AndresAlla on Friday November 03, 2017 @09:20AM (#15618960)
Yes, this is to use OCSP. You do not have to pay if you download revocation lists manually. Ofcourse lists become stale rather quickly.

Very basic - hello world level - implementation is as simple as enabling client certificate authentication in Apache config.

[ Parent | on HN ]