OAuth 2.0 SSL Certificate Requirements
Web Development
1
Posts
1
Posters
0
Views
1
Watching
-
I'm about to deploy an application that comprises a web site (ASP.NET MVC) and an API (WebAPI) using OAuth 2.0 for security. Currently all the calls to the API are done server side by the web site and will be configured to use SSL as will the web site itself. My question is about the certificate requirements, it appears that this isn't really detailed in the spec so thought I'd throw this out for discussion. What are peoples thoughts on the use of SSL certificates in this scenario? Do you require multiple certificates? One for securing the site and another separate one used for dealing with the token creation or would it be safe/good practice to use a single certificate? Thanks, Jammer