A customer of mine and I are fooling around with using SSLFakeBasicAuth to log users in to a paysite. Has anyone ever used this method before? Interested in implementing it and was wondering about some feedback on the pros and cons.
Only draw back is the user has to access the site from the computer the Certificate is loaded on after sign up.
But it would basically kill all brute force attacks and password sharing.
I have used it before with a plug-in site to secure access between the two sites. Worked quite well.
More info:
http://slwww.epfl.ch/SIC/SL/CA/access_control.html
Any opinions on this is appreciated.
V