Re: HTTPS Client Certificate Authentication - Browser Implementation Guidelines

On 18 May 2014 10:01, Anders Rundgren <anders.rundgren.net@gmail.com> wrote:

> If the WebID folks including TimBL believe that the only problem is the
> UI,


Has anyone stated this?



> the most
> logical thing to do would be creating a document like the subject line
> suggests.
>

+1


>
> There is a risk that the vendors will simply laugh at such a request,  but
> that's much
> better than promising improvements that so far haven't even been
> acknowledged by
> those who are supposed to implement them.
>
> I would personally be very interested in hearing what the "right" session
> inactivity
> timeout for logout is.  Client-side enforced logout requires TCP reset.
>
> Anders
>
>