Do you happen to know a developer of Firefox or Chrome or some other mainstream browser?
If so, can you please talk to them about our experiments with Client Certificate authentication in Debian?
Client Certificate authentication rocks; with just a couple of little tweaks in the interface, it would be pretty close to perfect.
Visiting sites without using a certificate
If I want to browse a site unauthenticated instead of using a certificate, at the moment I can hit "Cancel" on the certificate popup menu, and it works nicely. I feel quite confused when I do that, though, because it's not clear to me if I am canceling use of certificates, or canceling the visit to the site.
Can you please change the wording on the Cancel button to something more descriptive?
See/change current certificate selection
My top wish is, once I choise to use (or not use) a certificate for a site, to be able to see which certificate I'm using and possibly change it.
At the moment I did not find a way to see what certificate I'm using, and the browser will remember the choice until it gets closed and reopened.
At the moment I can use a Private or Incognito window to switch identities or to stop authenticated access and continue anonymously, and that helps me immensely.
I think however that the ultimate solution could be to have the https lockpad popup show an indication of what certificate is currently being used, and offer a way to re-trigger certificate selection. That would be so cool.
Also, once the certificate choice can be seen and changed at any time, it could just get remembered so that sites can be visited again without any prompts, even after the browser has been closed and reopened. That would be, to me, the ultimate convenience.
Thanks! <3
Thank you very much for all the work you have already put into this: I have been told that a few years ago using client certificate was unthinkable, and now it seems to be down to just a couple of papercuts. And SPKAC/keygen seriously rocks!
I have been constantly impressed by how well this all works right now.