Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I know GitHub uses it for code development (not user authentication for the website though). I saw this article on the idea: http://neverfear.org/blog/view/3/Secure_website_authentication_using_GPG_keys

Is there a plugin or some open source code to authenticate users in a CMS (e.g. Drupal, Wordpress, Django, etc) with public-private key signatures?

Has anyone implemented this type of website authentication before?

share|improve this question

What I think you mean is Mutually Authenticated SSL, were the visitor presents his key as an authentication token. I have implemented it and it can be quite hard to implement at medium to large scale as it usually requires you to create a supporting PKI infrastructure with Self Service.

If you are implementing a small version with this as the only factor of authentication the easiest way to go about it is to use the TLS/SSL plugins your web server provides and have this automatically authenticate your authorized user in the backing service - aka Drupal or Wordpress, etc - once the certificate has been verified.

As a multiple factor authentication you would set up the same service as above, and redirect them to the authentication page of the backing service you are using once the certificate has been verified.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.