NuGet / Home

Repo for NuGet Client issues
Other
1.5k stars 253 forks source link

Create docs for HTTPS client certs feature #13485

Open zivkan opened 4 years ago

zivkan commented 4 years ago

Create docs for new commands added in https://github.com/NuGet/NuGet.Client/pull/3273

bgreman commented 2 years ago

Here we are nearly two years later and these docs still don't exist. I had a heck of a time figuring out that the "FindBy" prefix needs to be dropped from the FindBy types. I actually read it directly in the code to figure that out.

silvianoblea commented 2 years ago

I hope to test this option and hopefully provide feedback for more formal documentation as this is definitely needed in the government sector.

JonDouglas commented 2 years ago

Some further details:

  1. Restore doesn't provide sub-statuses for servers that provide reasoning as to client certification requirements.
  2. We should create nuget cli / dotnet cli / conceptual docs for this area based on the specification: https://github.com/NuGet/Home/blob/dev/proposed/archive/NuGet-ClientCertificates.md
ShahMoneyXL commented 2 years ago

I agree with the above! I work with security-sensitive organizations who demand strong cryptographic multifactor authentication, and I've had to spend dozens of hours testing undocumented configurations.

It would help others immensely to have documentation and guidance on how to use these capabilities with client certificates. Especially as the sovereign Azure clouds have no cloud Azure DevOps capability.

djcornutt commented 2 years ago

+2, there are a wide range of opportunities for customer implementations that can open up to us if we can meet security requirements that are stronger than the typical commercial customer. The documentation helps us in the field cut down on problematic implementations and prolonged engagement with support organizations and product groups.

JonDouglas commented 2 years ago

Everyone coming to this issue please 👍 the top most comment so we can prioritize writing the docs here.