Home

Welcome to my blog ! You are connected to node (loading…)

This blog is also available over the Gemini protocol at gemini://gemini.ribes.ovh:1965/

Posts






DN42 SSH-mTLS auth

Currently in DN42 there are several services that can authenticate a user against data store in the registry. All of them use a challenge-response OTP model:

  • receiving an email to you MNTner address
  • signing a random string with your SSH/GPG private key

Currently with Kioubit & iEdon auth you can setup a password once you have logged in with email or private key.

But all of these are too “simple”, and are restricted to the browser. If only we could authenticate people using private keys with the HTTPS protocol … Wait, that’s mTLS isn’t it ?