HTTP-POST vs. ECP

[Cantor, Scott]

> Scott, Can you elaborate further?  Please?  :-)

I'm not sure what kind of detail you're looking for. Client certs have been undeployable at any scale for longer than I've worked on this project. No new information here.

It's just very easy to support them primitively on a server, assuming you don't care about the DN to user mapping and leave it out of scope. If you support basic-auth, chances are you can already support client TLS on a web server mechanically.

-- Scott