Account & Settings

colm-steele
Member

TLS Client Authentication

SOLVE

Hi,

 

Is it possible to use customer ssl cert as specified in https://www.hubspot.com/products/marketing/ssl

across entrie hubspot site, not just marketing, and also could it be used with a self signed cert that we supply, to reject access from users without the relevant client cert?

Similar to this post on Cloudflare.

https://blog.cloudflare.com/introducing-tls-client-auth/

 

Intention is to get around the lack of IP lockdown, but still provide some method of securing access, be it from a single site/machine etc.

 

Thanks

 

Colm

0 Upvotes
1 Accepted solution
jennysowyrda
Solution
Community Manager
Community Manager

TLS Client Authentication

SOLVE

Hi @colm-steele,

 

It is possible to use an SSL certificate to secure all of your HubSpot hosted content, such as Blog Posts, Landing Pages, Website Pages, Knowledge Base articles, and web versions of emails. (Essentially that your custom certificate is served to any requests which hit HubSpot servers for URL’s on your connected domains)

 

However, currently it is not possible to to reject access from users without a relevant client cert such as Cloudflare's TLS with client authentication. If you are looking to restrict access to your HubSpot hosted content, this can be done by either password protecting your pages or setting up certain lists of contacts to have login membership access to the content, as outlined in this article.

 

Thank you,
Jenny

View solution in original post

0 Upvotes
3 Replies 3
TWorld
Member

TLS Client Authentication

SOLVE

I really appreciate the topics you post on here. Thank you for sharing such useful information. Reach out to Monemyst for more IVA help.

0 Upvotes
jennysowyrda
Solution
Community Manager
Community Manager

TLS Client Authentication

SOLVE

Hi @colm-steele,

 

It is possible to use an SSL certificate to secure all of your HubSpot hosted content, such as Blog Posts, Landing Pages, Website Pages, Knowledge Base articles, and web versions of emails. (Essentially that your custom certificate is served to any requests which hit HubSpot servers for URL’s on your connected domains)

 

However, currently it is not possible to to reject access from users without a relevant client cert such as Cloudflare's TLS with client authentication. If you are looking to restrict access to your HubSpot hosted content, this can be done by either password protecting your pages or setting up certain lists of contacts to have login membership access to the content, as outlined in this article.

 

Thank you,
Jenny

0 Upvotes
JamesPat
Member

TLS Client Authentication

SOLVE

Understood, thanks a lot for your response Jenny. vidmate

0 Upvotes