Re: Just to clarify one thing...
No, let ME clarify just one thing for you. First, I want you to go read this web page:
Done? Okay, you see where that's a Presidential Directive? Not a Memorandum, a Presidential Directive?
Did you notice the date on it? Yeah, yeah, I know you're more concerned that it was W than the date, but look at the date anyway.That's right: 2004 Almost 11 full years ago. It was supposed to be implemented in 5 years. No, it still hasn't been fully implemented. Yes to this day many of us still use username and password for elevated privileges.
This https directive won't fare any better for the same reason that one didn't:
- standard foot dragging
- rules lawyering (e.g., this is an intranet page, not a web page so it doesn't need a cert)
- agencies don't have the money to implement the directive