We have an internal website, served from behind HTTPS with client certificates. Website users are non-technical persons, working remotely. They use Windows (XP, Vista, 7) and OS X (10.5, 10.6, 10.7). ...
We have a discussion in my company's security group about what's the worse of the following options to manage SSL private key. The web server needs access to the private key for the encryption ...