Re:Why is nobody using SSL client certificates?
by mpyne on Thursday July 11, 2013 @01:28PM
(#6027528)
If you're actually on the DoD network that's only necessary in the rarest of cases. Retirees have to drive awhile sometimes, that's true, but they are not getting CAC anyways, they're getting old-style ID cards.
[ Parent
| on HN ]
Re:Why is nobody using SSL client certificates?
by stonemetal on Thursday July 11, 2013 @01:55PM
(#6027754)
In my experience that is the common case, work for a defense contractor not on, but near a military base. I very well could be wrong though.
Re:Why is nobody using SSL client certificates?
by mcguire on Thursday July 11, 2013 @04:10PM
(#6028844)
I don't work for the DoD, but you have the process right as far as I've seen. Don't forget that they seem to want a new set of fingerprints every time you go in.
Re:Why is nobody using SSL client certificates?
by mpyne on Thursday July 11, 2013 @06:35PM
(#6029735)
Yeah, it does suck to be CTR, I'll admit. Especially if you need separate CAC credentials for things like base access.