[Discuss] eliminating passwords
Richard Pieri
richard.pieri at gmail.com
Mon Jul 29 14:21:12 EDT 2013
Tom Metro wrote:
> Far from a perfect solution, but its cheaper and a better user
> experience than two-factor.
It's X.509 PKI key exchange. SSL is built on top of an X.509 PKI.
X.509 is far from perfect. Very far. X.509 was designed by committee. It
shows in its fundamental weaknesses (such as reliance on the trust of
third party certificate authorities) and implementation weaknesses (too
numerous to list). Better systems exist. Hell, better systems existed
before X.509 did.
--
Rich P.
More information about the Discuss
mailing list