Page 1 of 1
How to authenticate the user using the PC Mac address
Posted: Fri Dec 17, 2010 12:47 am
by flamer
Is it possible to only allow users to access my website with their PC Mac Address authentication? One's the user access my website, the mac address will be first check if it is a valid mac address before it will completely view my website. Or is it ideal to only use certificate authentication? Please advise if what's more secure? or just by using https instead of http? Thanks
Re: How to authenticate the user using the PC Mac address
Posted: Fri Dec 17, 2010 4:08 am
by VladSun
If it's Intranet application - probably. The user's IP should be in the same network segment (i.e. no routers between the user and the WWW server).
If it's nternet - no, you can't. Why? Read this topic:
viewtopic.php?f=6&t=89514
Also, this is a very bad idea - MAC address is extremely easy to be spoofed.
Re: How to authenticate the user using the PC Mac address
Posted: Fri Dec 17, 2010 5:32 am
by Darhazer
https alone without client certificate won't help you.
https with a client certificate and a user password is a good choice
Re: How to authenticate the user using the PC Mac address
Posted: Sat Dec 18, 2010 3:14 am
by flamer
Thanks, what would be the best solution to tighten my security?