[Development] RFC: Managing the Addition of New SSL Backends

[Thiago Macieira]

Em sáb 03 maio 2014, às 22:23:30, Richard Moore escreveu:
> - A small but significant number of apps use client certificates.
> 
> - A small but significant number of apps use server SSL sockets.
> 
> - Very few applications use custom trust stores.

I'd say there's a specific case where all three go together: if I am trying to 
verify a client certificate in a server application, I probably want to verify 
that the client certificate was issued by my CA. 

However, this case is uncommon and it's also unlikely to happen in a closed / 
controlled platform. Servers running SSL services are often not mobile 
applications, but it could happen for device-to-device communication in an 
Internet of Things world...

-- 
Thiago Macieira - thiago.macieira (AT) intel.com
  Software Architect - Intel Open Source Technology Center