Difference between revisions of "Client Certificate"
(→Context) |
(→Problem) |
||
| Line 8: | Line 8: | ||
Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. [https://www.keeper.io/hubfs/PDF/Password%20Malpractice%20Campaign/Workplace%20Password%20Malpractice%20Report%20-%202021.pdf Recent data from Keeper Security and Pollfish] shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers. | Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. [https://www.keeper.io/hubfs/PDF/Password%20Malpractice%20Campaign/Workplace%20Password%20Malpractice%20Report%20-%202021.pdf Recent data from Keeper Security and Pollfish] shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers. | ||
| + | |||
| + | ==Solutions== | ||
| + | [https://www.thesslstore.com/blog/client-authentication-certificate-101-how-to-simplify-access-using-pki-authentication/#:~:text=Your%20client%20sends%20its%20client,certificate%20is%20legitimate%20and%20valid Certificate-based authentication] allows users to log in to various systems without typing in a traditional username and password. Instead, the user’s browser (i.e., their client) automatically logs them in using a digital certificate (and a PKI key pair — more on that later) that’s saved on their individual computer or device. This method of authentication allows authorized users to access everything from specific files and services to your network and other IT systems | ||
==References== | ==References== | ||
Revision as of 17:45, 8 February 2023
Full Title or Meme
A Certificate that is created to identify the client in a client-server environment
Context
Mutual Authentication or mTLS is used in a version of TLS where both sides of the connection have certificates that are evaluated during the TLS handshake.
Problem
Password-based security in many organizations is a problem. Sure, part of this stems from employees practicing poor password hygiene (such as creating weak passwords or sharing their credentials with colleagues). However, a large part of it comes from employers practicing poor access management. Recent data from Keeper Security and Pollfish shows that 32% of their 1,000 survey respondents say they’ve accessed accounts belonging to their former employers.
Solutions
Certificate-based authentication allows users to log in to various systems without typing in a traditional username and password. Instead, the user’s browser (i.e., their client) automatically logs them in using a digital certificate (and a PKI key pair — more on that later) that’s saved on their individual computer or device. This method of authentication allows authorized users to access everything from specific files and services to your network and other IT systems
