> and leave you with no upsides. The only place I've personally seen client-side certificates implemented in a browser was for StartSSL's site (which is famous

> and leave you with no upsides. The only place I've personally seen client-side certificates implemented in a browser was for StartSSL's site (which is famously janky in it's workflow). In contrast, pretty much anyone who does anything on the CLI in a unix environment has a client-side ssh key set up, already good to go.