News for hackers. Stuff that matters.
Re:Why is nobody using SSL client certificates? by gcb0 on Thursday July 11, 2013 @05:36PM (#6029392)
Not really. you could use a storage medium that is remote and load it in memory only, if the usage justified.... not case, for reasons you outlined eloquently on the article.

Also, the client cert, as with private keys, allows you to memorize ONLY ONE password (make it a passphrase, please) instead of a bazillion (or, gasp, reusing).

So, no, it's not an extra hassle. it's a solution for the real hassle of passwords in websites. if it was used.

There are no comments on this comment yet.