Client Certificate - Revision history

Tom: /* Problem */

2023-02-09T00:59:08Z

‎Problem

Tom: /* Solutions */

2023-02-09T00:47:25Z

‎Solutions

Tom: /* Problem */

2023-02-09T00:45:16Z

‎Problem

Tom: /* Context */

2023-02-09T00:42:57Z

‎Context

Tom: /* Context */

2023-02-08T05:23:56Z

‎Context

Tom: /* References */

2023-02-08T05:21:23Z

‎References

Tom: Created page with "==Full Title or Meme== A Certificate that is created to identify the client in a client-server environment ==Context== Mutual TLS or mTLS is a version of TLS where both sides..."

2023-02-08T05:21:02Z

Created page with "==Full Title or Meme== A Certificate that is created to identify the client in a client-server environment ==Context== Mutual TLS or mTLS is a version of TLS where both sides..."

New page

==Full Title or Meme==
A Certificate that is created to identify the client in a client-server environment

==Context==
Mutual TLS or mTLS is a version of TLS where both sides of the connection have certificates that are evaluated during the TLS handshake.

==References==

[[Category: Security]]
[[Category: Authentication]

@@ Line 7: / Line 7: @@
 ==Problem==
-Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. [https://www.keeper.io/hubfs/PDF/Password%20Malpractice%20Campaign/Workplace%20Password%20Malpractice%20Report%20-%202021.pdf Recent data from Keeper Security and Pollfish] shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers.
+Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. [https://www.keeper.io/hubfs/PDF/Password%20Malpractice%20Campaign/Workplace%20Password%20Malpractice%20Report%20-%202021.pdf 2021 data from Keeper Security and Pollfish] shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers.
 ==Solutions==

@@ Line 11: / Line 11: @@
 ==Solutions==
 [https://www.thesslstore.com/blog/client-authentication-certificate-101-how-to-simplify-access-using-pki-authentication/#:~:text=Your%20client%20sends%20its%20client,certificate%20is%20legitimate%20and%20valid Certificate-based authentication] allows users to log in to various systems without typing in a traditional username and password. Instead, the user’s browser (i.e., their client) automatically logs them in using a digital certificate (and a PKI key pair — more on that later) that’s saved on their individual computer or device. This method of authentication allows authorized users to access everything from specific files and services to your network and other IT systems
 ==References==

← Older revision		Revision as of 00:45, 9 February 2023
Line 8:		Line 8:

	Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. [https://www.keeper.io/hubfs/PDF/Password%20Malpractice%20Campaign/Workplace%20Password%20Malpractice%20Report%20-%202021.pdf Recent data from Keeper Security and Pollfish] shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers.		Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. [https://www.keeper.io/hubfs/PDF/Password%20Malpractice%20Campaign/Workplace%20Password%20Malpractice%20Report%20-%202021.pdf Recent data from Keeper Security and Pollfish] shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers.
		+
		+	==Solutions==
		+	[https://www.thesslstore.com/blog/client-authentication-certificate-101-how-to-simplify-access-using-pki-authentication/#:~:text=Your%20client%20sends%20its%20client,certificate%20is%20legitimate%20and%20valid Certificate-based authentication] allows users to log in to various systems without typing in a traditional username and password. Instead, the user’s browser (i.e., their client) automatically logs them in using a digital certificate (and a PKI key pair — more on that later) that’s saved on their individual computer or device. This method of authentication allows authorized users to access everything from specific files and services to your network and other IT systems

	==References==		==References==

← Older revision		Revision as of 05:21, 8 February 2023
Line 8:		Line 8:

	[[Category: Security]]		[[Category: Security]]
−	[[Category: Authentication]	+	[[Category: Authentication]]

@@ Line 4: / Line 4: @@
 ==Context==
 [[Mutual Authentication]] or mTLS is used in a version of TLS where both sides of the connection have certificates that are evaluated during the TLS handshake.
 ==References==