Comment on Secure website-authentication using GPG keys

Anonymous
Sun, 30 Dec 2007 18:41:53 +0000

As a couple of people pointed out above, SSL has all of the tools you need to secured authentication and it's already integrated into modern browsers and webservers.

Apache can be set up so that access to directories or entire servers is dependent on having a client-side certificate signed by the proper CA, there are plenty of tools that will make it easier for end-users to install the certificate in their browser, etc.

If you're absolutely determined to use gpg then you might want to take a look at John Walkers Javascrypt which is a javascript implementation that can be run from the users browser.