Y
Hacker News
new
|
ask
|
show
|
jobs
by
nickf
133 days ago
Publicly-trusted client authentication does nothing. It's not a thing that should exist, or is needed.
2 comments
account42
133 days ago
It does if the "client" in the TLS sense is really a public server in a federated network. Like for example in XMPP which you may have heard of.
link
direwolf20
133 days ago
Then you specify your protocol to accept server certs from clients
link
ahmedtd
133 days ago
I don't think this is true. It's something that could be useful, with some sort of ACME-like automated issuance, but should definitely be issued from a non-WebPKI certificate authority.
link