Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So you have a situation where the client has already authenticated the server using TLS, and now the server wants to authenticate the client too. This solution wants to do that by setting up a new channel, authenticating the server /again/ and then also the client.

Yeah, I don't think this is a good idea.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: