💾 Archived View for bbs.geminispace.org › u › skyjake › 1116 captured on 2023-11-14 at 09:10:35. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

Comment by 🚀 skyjake

Re: "hobby coder here with a question. When implementing client..."

In: s/Gemini

You may be interested in this thread where the same topic came up:

— /s/Bubble/149

🚀 skyjake

May 27 · 6 months ago

2 Later Comments ↓

🤖 alexlehm · May 27 at 08:56:

I had a big problem convincing people on another project that the way client hashes are used are in fact secure (since I asked how to do that in a Java server). In the end it turned out to work quite well, I use that in my chat server

🍀 gritty · May 27 at 16:34:

perfect, that's what I thought. thanks everyone!

Original Post

🌒 s/Gemini

hobby coder here with a question. When implementing client authentication, do we just store the tls client hash? If so how is this not able to be spoofed? I'm guessing there is some public key authentication going on in the background. looking at the spec and some searches only helped a little.

💬 gritty · 4 comments · May 27 · 6 months ago · #certificates #client_certificates #programming