Why is nobody using SSL client certificates?

Re:Why is nobody using SSL client certificates? by arscan on Thursday July 11, 2013 @11:23AM (#6026591)

True, it works great for the average dod user (and in an enterprise in general) because they have a helpdesk that sets everything up for them. Once its configured it works fine, which is consistent with the message of this article.

Good luck to them if they want to install a different browser (non-IE) or do anything non-standard... if they even are allowed to do so.

[ Parent | on HN ]

Re:Why is nobody using SSL client certificates? by paxswill on Thursday July 11, 2013 @08:27PM (#6030170)

For a while I was checking upcoming OS X releases for CAC compatibility. At least on OS X, it's surprisingly easy to get set up, with the hardest step finding a compatible card reader. Once you have that, you usually have to install a PKCS#11 module (usually CACKey for DoD). Once that's all done, it's presented as an additional Keychain for the rest of the system to use. I know Chrome and Safari work with it without further fiddling, and I'm pretty sure Firefox will as well.

[ Parent | on HN ]

Re:Why is nobody using SSL client certificates? by marshray on Thursday July 11, 2013 @05:55PM (#6029518)

Firefox did a lot of work to make CAC cards work for the DoD, they didn't develop a FIPS module just for the fun of it.

[ Parent | on HN ]