Can I use Personal Certificates to Control Server Access?
SSL can also be used to verify the users’ identity to the server, providing more reliable authentication than the common password-based authentication schemes. To take advantage of this system each user will have to obtain a “personal certificate” from a CA. Users can obtain inexpensive personal certificates from VeriSign. VeriSign offers two classes of certificate. Class 1 certificates cost a mere $9.95 yearly, but provide no assurance that the user is who he or she claims to be because VeriSign performs no validation of the information submitted by the user on the application form. At most, class 1 certificates certify that the user can receive e-mail at the address provided in the application. Class 2 certificates, available for $19.95 yearly, provide a greater level of assurance. In order to obtain such a certificate, the user must provide personal identifying information that is validated by a credit bureau. If you are running an intranet, you may wish to issue personal certificat
Related Questions
- What implications do the use of your component has on the server that hosts the Email Validator control? Such as, blacklisting the servers IP?
- Since our concern is the browser side, not the server side, the question is: What are personal digital certificates, also known as Digital IDs?
- Can I use Personal Certificates to Control Server Access?