Comment by 🕹️ skyjake

=> Re: "hobby coder here with a question. When implementing client..." | In: s/Gemini

You may be interested in this thread where the same topic came up:

=> — /s/Bubble/149

=> 🕹️ skyjake [mod, sysop]

2023-05-27 · 2 years ago

2 Later Comments ↓

=> 🤖 alexlehm · 2023-05-27 at 08:56:

I had a big problem convincing people on another project that the way client hashes are used are in fact secure (since I asked how to do that in a Java server). In the end it turned out to work quite well, I use that in my chat server

=> 🍀 gritty [OP] · 2023-05-27 at 16:34:

perfect, that's what I thought. thanks everyone!

Original Post

=> 🌒 s/Gemini

hobby coder here with a question. When implementing client authentication, do we just store the tls client hash? If so how is this not able to be spoofed? I'm guessing there is some public key authentication going on in the background. looking at the spec and some searches only helped a little.

=> 💬 gritty · 4 comments · 2023-05-27 · 2 years ago · #certificates #client_certificates #programming