Nasel jsem zpusob pouziti certifikatu SSH pro autentizaci - prijde mi to na strane serveru neprilis slozite (kdyztak me vyvedte z omylu...):
In brief, certificate authentication works in the following way:
* The client sends the user certificate (which inludes the user's public key) to the server.
* The server uses the CA certificate to check that the user's certificate is valid.
* The server uses the user certificate to check from its mapping file(s) whether login is allowed or not.
* Finally, if connection is allowed, the server makes sure that the user has a valid private key by using a challenge.
Porad mi prijde, ze kdyby se zavedlo pouzivani jednotneho overeneho certifikatu pro prihlasovani k ruznym sluzbam, tak je to jednoduzsi, nez OpenID a spol. ?? Neco ve stylu certifikatu overeneho digit. podpisu, ktery by ale umoznoval vice funkci, nez jen podepisovat maily...
Názor k článku
OpenID: Identity, aliasy a vlastní poskytovatel
