[CB-2669] Support for mutual SSL (on Ajax calls)

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 2.5.0
• Component/s: cordova-ios
• Labels: SSL clientcertificate core mutualSSL two-factor

Environment

In many situations, two-factor authentication is mandatory.

• Assignee: Unassigned
• Reporter: Jamie Brooks
• Created: 13/Mar/13 20:47
• Updated: 02/Dec/18 12:37
• Resolved: 02/Dec/18 12:37

Description

In some situations, two-factor authentication is required, and client certificates (a X.509 certificate with a 1.3.6.1.5.5.7.3.2 enhanced key usage) are a popular choice as a first factor. With mutual SSL, the client verifies the server's identity (server authentication) and the server verifies the client's identity (client authentication). Unfortunately, Cordova does not support mutual SSL.