#indieweb 2016-05-05

2016-05-05 UTC

aaronpk [kevinmarks]: the difference is with a client cert, you're not sending the private key to the server, so there's no way it can be intercepted because of skipping the SSL verification like in the bearer token example