Can you please list of advantages /disadvantages on X509 Certificate based authentication instead of traditional username/password model ?
Architecture Scenario :
Lets suppose i have Client application made a request to Server(REST API Implementation) before processing client request we want to introduce a authentication mechanism based x.509 certificate instead of routine username/password or Token based models.
and also primarily i want server-server secure service with x509
What all security challenges/complexity involved to implement this kind of authentication ?
If Client/Server communication is already using HTTPS and login mechanism is with username/password. Do i need to introduce another certificates again to overwrite this solution or same https enabled certificates can i use ?