Subject: [pkix] TLS client cert auth. Re: Which is the new KPI research that is telling us how PKI is going on?

From: Anders Rundgren <[email-masked]>
Date: Mon, 25 Jul 2011 09:37:01 +0200

Roberto,

There's no need for deep studies to understand why simple PKI (=can be
deployed as easy as passwords) is not happening.

TLS client-cert-authentication as implemented in browsers is a
really bad system, there's not even a "logout" mechanism!

"Clear SSL state" or similar browser features do not work
for any but experts.

I don't believe that TLS-c-c-a will ever become mainstream,
it will remain a mechanism for static secure tunnels between
computers.

Anders