News for hackers. Stuff that matters.
Re:Why is nobody using SSL client certificates? by stonemetal on Thursday July 11, 2013 @12:24PM (#6027042)
Enrolment is a hefty process. Apply for smart card. Personalise physical card (typically photo and name), provision (link card to user), give card to user, mail PIN to user (out of band), and then activate card.

You missed the part where you drive several hours to the closest military base and wait in line several hours(think DMV and TSA all rolled into one).

Re:Why is nobody using SSL client certificates? by mpyne on Thursday July 11, 2013 @01:28PM (#6027528)
If you're actually on the DoD network that's only necessary in the rarest of cases. Retirees have to drive awhile sometimes, that's true, but they are not getting CAC anyways, they're getting old-style ID cards.
Re:Why is nobody using SSL client certificates? by stonemetal on Thursday July 11, 2013 @01:55PM (#6027754)
In my experience that is the common case, work for a defense contractor not on, but near a military base. I very well could be wrong though.
Re:Why is nobody using SSL client certificates? by mcguire on Thursday July 11, 2013 @04:10PM (#6028844)
I don't work for the DoD, but you have the process right as far as I've seen. Don't forget that they seem to want a new set of fingerprints every time you go in.
Re:Why is nobody using SSL client certificates? by mpyne on Thursday July 11, 2013 @06:35PM (#6029735)
Yeah, it does suck to be CTR, I'll admit. Especially if you need separate CAC credentials for things like base access.
Re:Why is nobody using SSL client certificates? by count on Thursday July 11, 2013 @11:41PM (#6030785)
October is hell month :)
Re:Why is nobody using SSL client certificates? by RyJones on Thursday July 11, 2013 @08:27PM (#6030172)
Try when you don't have prints. Took a long time to get my card issued.