Re: [WEB SECURITY] MachineID fingerprinting

[robert@xxxxxxxxxxxxx]

>> I have successfully used client certificates using SSLv3 to authenticate between servers before beginning an LDAP 
>> based authentication, it was tricky to implement in ColdFusion due to my inexperience and lack of suitable libraries 
>> (its supported in the new version cf8) but I have been informed that it can be done with relative ease using java. The 
>> authentication sequence is like this

Client side certificates is impossible for this specific implementation. I'm not looking for backend implementation examples
, I'm asking how a local device fingerprinting layer has worked for people in the past in terms of accuracy and dependability. If it
ended up being total crap to someone on this list I'm looking for an explanation as to why :)

Regards,
- Robert


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]