Hacker News new | ask | show | jobs
by dattl 3869 days ago
Might be a stupid idea, but could you use Let's Encrypt Certs as client certificates? And the browser would generate a cert on it's own?
1 comments

A few of the CAs have in the past offered certificates tied to personal email addresses for cheap as free for years in the hopes that S/MIME catch on. Those are typically fine for HTTPS client certificates too, but the bootstrapping problem is essentially the same for both. To date no one has really managed to get certificates easy enough to use for the average lay person nor adoption common enough for a lay person to need to overcome the learning curve.