In an https context, if a server does not send a CertificateRequest message, is there any other way it can require non-repudiation from the client?

  • I believe that is the only way that the server can require validation from the client. The client can always send his/her certificate regardless of getting that request. But the server will probably just ignore it if it's not expecting it. – RoraΖ Sep 11 '14 at 17:08
  • 1
    "non-repudiation" of what exactly? – curiousguy Sep 11 '14 at 17:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.