News for hackers. Stuff that matters.

A comment on How Open ID Connect Works. Parent comment

Re:How Open ID Connect Works by EthanHeilman on Thursday January 04, 2024 @02:16PM (#38871033)
Isn't Google moving toward phasing out TLS client certs in chrome/chromium?
[ Parent | on HN ]
Re:How Open ID Connect Works by jeroenhd on Thursday January 04, 2024 @04:35PM (#38872596)
Do you have any source for that? I can't find anything online about this, but that would effectively kill browser mTLS.
[ Parent | on HN ]
Re:How Open ID Connect Works by EthanHeilman on Thursday January 04, 2024 @10:23PM (#38875340)
Chromium removed support for generating TLS Client Certs within chrome in 2016 [0] and ever since then it has gotten harder and harder to use mTLS in Chrome/Chromium. Ten years ago it wasn't a great UX, but now it isn't even obvious how to use it. The impression I've gotten is that Chrome isn't interested mTLS.

[0]: https://groups.google.com/a/chromium.org/g/blink-dev/c/z_qEp...

[ Parent | on HN ]