TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Secure Website Authentication Using GPG Keys

9 pointsby a0almost 12 years ago

3 comments

Eifrigalmost 12 years ago
The root cert aside and with all the other ssl deficiencies all browsers support it! Usability is imo the issue if more than a handful of people need to access the site. RFC6509 <a href="http://tools.ietf.org/html/rfc6509" rel="nofollow">http:&#x2F;&#x2F;tools.ietf.org&#x2F;html&#x2F;rfc6509</a> shows crypto independent of any PKI. Implemented running in Javasrcipt and HTML5 as open source www.certivox.org where unlike Diffie-Hellman the key agreement is authenticated. No passwords, usernames... nothing.
Zashalmost 12 years ago
I had a hacky wiki based on GPG-signed text files: <a href="https://gist.github.com/Zash/3804318" rel="nofollow">https:&#x2F;&#x2F;gist.github.com&#x2F;Zash&#x2F;3804318</a> Editing was done through a shell script that fetched the source, invoked my editor, signed and uploaded the signed text back.
queseraalmost 12 years ago
When https was invented, we imagined that users would have personal certificates for authentication (&amp;c).