[144703] in cryptography@c2.net mail archive
Re: Client Certificate UI for Chrome?
daemon@ATHENA.MIT.EDU (James A. Donald)
Sun Aug 9 10:07:46 2009
Date: Fri, 07 Aug 2009 12:11:11 +1000
From: "James A. Donald" <jamesd@echeque.com>
Reply-To: jamesd@echeque.com
To: Thomas Hardjono <hardjono@MIT.EDU>
CC: Ben Laurie <benl@google.com>,
Cryptography <cryptography@metzdowd.com>
In-Reply-To: <1249593852.abBf4EBb.1090084CCEFE8EA8A94499391B96064A1B24D3DA90558@w92expo4.exchange.mit.edu>
Thomas Hardjono wrote:
> Having worked at a large CA for along time (trying to push for client-side certs with little luck), here are some thoughts on what Chrome could provide:
There are use cases where a centralized authority is useful.
Client side is not one of them.
Typical usage is "is this client one of our gang?".
Obviously the CA just gets in the way.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com