IP authentication vs. Certificate authentication

[netethix () iprimus com au]

Hi all,

Been asked to provide a 1 pager of pros and cons around IP-based authentication
and certificate-based authentication.

I've stated that IP authentication is subject to a number of exploits within
the protocol such as IP spoofing, IP piggybacking, and that with certificate-based
authentication it can be used to provide proof of identity. 

Can anyone else come up with any other compelling reasons for or against
either one, in the context of IP vs. certificate authentication?

Assume anything you like, so be as broad or specific as you like. Any thoughts
gratefully accepted.

Netethix
Nigel Hedges
IT Security Consultant
Mobile: 0413 483 436
Email: netethix () iprimus com au



---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to 
simplify the management and deployment of PGP and reduce overall PGP costs 
by up to 80%.
FREE WHITEPAPER & 30 Day Trial - 
http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 
----------------------------------------------------------------------------