Perceived issues with TLS Client Auth

Why not use TLS Client Auth? Because it has problems:

• User Experience
– Cert generation has UI
– Cert selection has UI
(happens before user can see content of web site)

• Privacy
– user identity is same across all web sites

• Portability
– moving certs is a hassle

• Problems in Datacenters
– make TLS terminators part of the TCB

http://tools.ietf.org/agenda/81/slides/tls-1.pdf.

As reported in previous thread with Ben Laurie.