Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That is correct. What I mean is that if there had been any widespread interest, then browser-makers would probably have fixed their UI/UX long ago. But since there never was any interest, nothing was fixed.


There is tremendous interest. TLS client certificates are just a categorically wrong solution to user authentication.


It is basically the same solution as Passkeys. CA involvement in TLS client auth is totally optional.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: