Re: A WebID Implementation => HTTPS Client Certificate Authentication lacks a useful filter mechanism. from Anders Rundgren on 2014-05-19 (public-webid@w3.org from May 2014)

From: Anders Rundgren <anders.rundgren.net@gmail.com>
Date: Mon, 19 May 2014 22:59:28 +0200
To: public-webid@w3.org
Message-ID: <537A70B0.9@gmail.com>

Unfortunately https://fictionverse.net displays the same UI
awkwardness as http://cimba.co which is listing *all* certificates
you have, not only those carrying a WebID URI.

However, this problem has nothing to do with UI, it is a limitation
in the HTTPS protocol.

A useful X.509 certificate-based web-authentication solution MUST IMO
be able to filter on any of the standard extension attributes.

For WebID-X.509 a specific WebID policy OID would be ideal since it
doesn't interfere with anything else.

Anders

Received on Monday, 19 May 2014 20:59:58 UTC