On: Why is nobody using SSL client certificates?

[stonemetal]

Enrolment is a hefty process. Apply for smart card. Personalise physical card (typically photo and name), provision (link card to user), give card to user, mail PIN to user (out of band), and then activate card.

You missed the part where you drive several hours to the closest military base and wait in line several hours(think DMV and TSA all rolled into one).

[mpyne → stonemetal]

If you're actually on the DoD network that's only necessary in the rarest of cases. Retirees have to drive awhile sometimes, that's true, but they are not getting CAC anyways, they're getting old-style ID cards.

[stonemetal → mpyne]

In my experience that is the common case, work for a defense contractor not on, but near a military base. I very well could be wrong though.

[mcguire → stonemetal]

I don't work for the DoD, but you have the process right as far as I've seen. Don't forget that they seem to want a new set of fingerprints every time you go in.

[mpyne → mcguire]

Yeah, it does suck to be CTR, I'll admit. Especially if you need separate CAC credentials for things like base access.

[count → mpyne]

October is hell month :)

[RyJones → mcguire]

Try when you don't have prints. Took a long time to get my card issued.