Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

The question may need to be reworded.

The server-side is set up with Squid3 acting as an Authenticating proxy by way of LDAP. I did this for testing purposes to make sure everything was working.

I would like to have the client-side authenticate using something like a certificate or the like so that the need to physically put in cred isn't needed.

Is this a possibility? This is my first real jump into this sort of thing, so by all means ask for more clarification and I will do my best to be more specific (if possible, haha)

share|improve this question

1 Answer 1

up vote 0 down vote accepted

Are you asking if it is possible to negate the need for "login" authentication by using certificate based authentication?

If so, then yes you certainly can provided that your users don't have roles which determine their access levels to the service (authorisation). Furthermore, you could also achieve mutual authentication so that both the server and client identify themselves as authentic (prevent man-in-the-middle attacks). I recommend that you research SSL and see what it can do for you!

I hope this is useful to you :)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.