Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

client certs (from the time the article mentions) are supposed to be used for consumers, hence no fancy chain like you mention, which was intended for b2b.

for cliente using a browser, the site would provide the user once with much less overhead and costs and red tape, using it own cert/private keys, which do have the full chain. it was basically a better way to be always logged without forever plain text cookies, as we actually got. or even worse, baked in the publisher owned OS/browser as google mamaged to fool everyone into.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: