News for hackers. Stuff that matters.

A comment on Why is nobody using SSL client certificates?. Parent comment

Re:Why is nobody using SSL client certificates? by wmf on Thursday July 11, 2013 @11:52AM (#6026823)
I've always liked the idea of smart cards, but I also wonder how I would use a smart card to simultaneously log in to a site from, say, my PC and phone. It seems like the card can only be plugged in one place.
[ Parent | on HN ]
Re:Why is nobody using SSL client certificates? by BHSPitMonkey on Thursday July 11, 2013 @05:49PM (#6029471)
Well your phone already has one smart card plugged into it all the time (assuming it's a GSM phone). Perhaps there's a clever way to leverage that as one factor in the authentication process.
[ Parent | on HN ]
Re:Why is nobody using SSL client certificates? by count on Thursday July 11, 2013 @01:58PM (#6027782)
That is, in fact, the point :) Using cards with your phone is a serious pain in the neck still, either way. You could always get an alternate token/card, so you have two you can use.
[ Parent | on HN ]