Re: Bi-directional certificate authentication [vs. passwords]

Le 16-09-2010, Tom St Denis <tom@xxxxxxx> a écrit :
On Sep 15, 2:54 pm, Paul Rubin <no.em...@xxxxxxxxxxxxxx> wrote:
[...]
For general sites, maybe OpenID is closer to what you want.

Problem with OpenID is you still need to give private data to
*someone*.

OpenID can use TLS client authentication. Verisign proposes it.
But you're right, OpenID needs API changes on web server.

.