undefined | Better HN

0 pointsnickf1mo ago0 comments

Publicly-trusted client authentication does nothing. It's not a thing that should exist, or is needed.

0 comments

It does if the "client" in the TLS sense is really a public server in a federated network. Like for example in XMPP which you may have heard of.

direwolf201mo ago

Then you specify your protocol to accept server certs from clients

ahmedtd1mo ago

I don't think this is true. It's something that could be useful, with some sort of ACME-like automated issuance, but should definitely be issued from a non-WebPKI certificate authority.

j / k navigate · click thread line to collapse