I hear that it is possible to create SSL certificates and use them instead of password authentication. Is this true and how to do it? And do all SSL enabled sites allow this?
3
-
Yes, it's possible. You do it the same way you create any other SSL certificate, you just include the additional purpose. However, almost no SSL enabled sites allow this because it's difficult to figure out the right policy without your own PKI. If you have your own PKI though, it works great.– David SchwartzCommented Aug 27, 2012 at 23:26
-
Thanks... Can you direct me to a how to? Let's say I want to use this with gmail - how would I go about it?– rep_movsdCommented Aug 28, 2012 at 7:44
-
You can't. Gmail doesn't offer it. As I said, almost no SSL enabled sites allow this. The exception would be entities that have their own PKI, like StartSSL (link will not work unless you have a StartSSL client certificate).– David SchwartzCommented Aug 28, 2012 at 8:16
Add a comment
|