Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I hear that it is possible to create SSL certificates and use them instead of password authentication. Is this true and how to do it? And do all SSL enabled sites allow this?

share|improve this question
Yes, it's possible. You do it the same way you create any other SSL certificate, you just include the additional purpose. However, almost no SSL enabled sites allow this because it's difficult to figure out the right policy without your own PKI. If you have your own PKI though, it works great. – David Schwartz Aug 27 '12 at 23:26
Thanks... Can you direct me to a how to? Let's say I want to use this with gmail - how would I go about it? – rep_movsd Aug 28 '12 at 7:44
You can't. Gmail doesn't offer it. As I said, almost no SSL enabled sites allow this. The exception would be entities that have their own PKI, like StartSSL (link will not work unless you have a StartSSL client certificate). – David Schwartz Aug 28 '12 at 8:16

You must log in to answer this question.

Browse other questions tagged .