133 reputation
3
bio website
location Tempe, AZ
age 39
visits member for 1 year, 10 months
seen Apr 2 at 19:52

I ask computers to carry out instructions. Often, they oblige.


Sep
29
comment What risks would exist in transmitting an encrypted PKCS12 via Https
And thanks, again. The way I had it structured the key pair was being created at the same time as the certificate, I split it out so that now the client generates the key pair, sends over public key with request, and the server creates and returns certificate. Huge help.
Sep
29
comment What risks would exist in transmitting an encrypted PKCS12 via Https
I've decided to go with client side certificate generation. Originally I had thought that there would be a certain non-repudiation benefit in being able to ensure I issued a client certificate, but on further consideration, if I am not going to cache the private key, then providing the certificate is really no different from any other highjacked credential. Thanks much for your input. Many thanks for you insights.
Sep
29
accepted What risks would exist in transmitting an encrypted PKCS12 via Https
Sep
26
comment What risks would exist in transmitting an encrypted PKCS12 via Https
Whether or not to trust the HTTPS connection is much of the key to my concerns. Assuming HTTPS is required, with no redirect fro the corresponding HTTP URL, when would I not trust the connection?
Sep
26
comment What risks would exist in transmitting an encrypted PKCS12 via Https
In subsequent authentications I want to ensure the certificate is one I issued. If I give that part up, I agree with you that client side generation probably makes the most sense.
Sep
26
awarded  Scholar
Sep
26
comment What risks would exist in transmitting an encrypted PKCS12 via Https
Thanks for the reply. I was planning on doing the certificate generation in memory, and only storing the resulting thumbprint after the fact. Is that reasonable?
Sep
26
comment What risks would exist in transmitting an encrypted PKCS12 via Https
Thanks for your response. I wasn't certain the HTTPS could be trusted that far, hence the extra encryption steps.
Sep
26
awarded  Supporter
Sep
26
awarded  Student
Sep
26
asked What risks would exist in transmitting an encrypted PKCS12 via Https