Re: Client certificate authentication -- but only for services

2018-12-20 Thread Mark Thomas
On 20/12/2018 04:28, Christopher Schultz wrote: > James, > > On 12/19/18 20:18, James H. H. Lampert wrote: >> I just had a crazy thought, in connection with a situation in >> which we're trying to figure out a way to limit web service >> connections to authorized consumers. > >> Here's the situat

Re: Client certificate authentication -- but only for services

2018-12-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 12/19/18 20:18, James H. H. Lampert wrote: > I just had a crazy thought, in connection with a situation in > which we're trying to figure out a way to limit web service > connections to authorized consumers. > > Here's the situation: we h

Client certificate authentication -- but only for services

2018-12-19 Thread James H. H. Lampert
I just had a crazy thought, in connection with a situation in which we're trying to figure out a way to limit web service connections to authorized consumers. Here's the situation: we have both a browser-based UI (for which we definitely do NOT want to require users to have client-side certifi