Re:Why is nobody using SSL client certificates?
by dredmorbius on Thursday July 11, 2013 @06:00PM
(#6029548)
That's a reason I use different sets of SSH keys from different hosts, or at least different classes of hosts.
It's rather troubling to find that many SSH management tools (including Puppet/Chef recipes) deal poorly with multiple keys per user.
Re:Why is nobody using SSL client certificates?
by ams6110 on Friday July 12, 2013 @12:20AM
(#6030896)
It's more than icons and design.
Users. Do. Not. Understand. Certificates.
If the word "certificate" or "public key" or "private key" appears anywhere in the process, it's a non-starter. If they have to select a certificate from a list, look at a "fingerprint", or deal with any other jargon like "x509" or "certificate authority" or anything along those lines, it's dead in the water.
Also agree that malware is moot (it can steal auth tokens live as they're submitted, so even physical tokens requiring 2-factor pins get compromised).
The problem is browsers haven't been proactive in making the technology user friendly, so websites don't adopt it, so browsers don't make the technology user friendly. A couple large icons and good design decisions would make it as easy as logging into your screen saver.