News for hackers. Stuff that matters.
Re:Why is nobody using SSL client certificates? by zobzu on Thursday July 11, 2013 @06:48PM (#6029794)
Persona synchronizes client private keys. Its not SSL Client certs but its not all that bad.

What I'd like is the same thing but be the owner of the private keys, stored on my external, physical token.

This works with SSL client certs, yes, but its a pita, and there is no trust from the client by the server if its never been seen before.

GnuPG actually works like that properly (with the MonkeySphere project for the web stuff), but its not used anywhere..

There are no comments on this comment yet.