I have only seen client-side certificates used twice. Once at now infamous StartSSL and second at a bank but for vendor access, not regular customers.
Its huge downside is that it's a second factor which doesn't protect against a compromised device.
That's true, but I think that if people used an encrypted private key (protected by a passphrase), then that would be less of an issue.
I have only seen client-side certificates used twice. Once at now infamous StartSSL and second at a bank but for vendor access, not regular customers.
Its huge downside is that it's a second factor which doesn't protect against a compromised device.