560 reputation
1716
bio website
location
age
visits member for 4 years, 1 month
seen Aug 10 '13 at 8:19

Jun
22
awarded  Good Question
Feb
3
awarded  Popular Question
Dec
9
awarded  Famous Question
Oct
27
awarded  Notable Question
Sep
25
awarded  Popular Question
Jul
2
awarded  Curious
Jun
2
awarded  Notable Question
Nov
15
awarded  Popular Question
Oct
25
awarded  Notable Question
Aug
26
awarded  Popular Question
Jul
25
awarded  Nice Question
May
23
awarded  Yearling
Apr
15
awarded  Notable Question
Feb
15
comment Is it safe to mix authentication methods?
Can anyone who has temporary access to a users browser trivially export their saved browser certificates? But isn't this an issue with client certificate authentication in general?
Feb
15
comment Is it safe to mix authentication methods?
@MarkC.Wallace:Updated with example.I don't know about misuse.That is why I ask
Feb
15
revised Is it safe to mix authentication methods?
added 176 characters in body
Feb
15
comment Is it safe to mix authentication methods?
My example is the inverse of yours.The user provides password and the server gets the user's certificate for subsequent client certificate authentication.Does your analysis still apply?
Feb
15
asked Is it safe to mix authentication methods?
Feb
8
accepted What are the Netscape Cert Type attributes? Why/when are they needed?
Nov
9
awarded  Popular Question