> I'd love to see an explanation for not supporting client authentication. My guess? They don't use it in their applications, so they don't think anyone else

> I'd love to see an explanation for not supporting client authentication. My guess? They don't use it in their applications, so they don't think anyone else uses it, either. TLS client authentication is widely used in 802.1X (WiFi and wired) authentication. I've seen it used in a lot of other situations, e.g. web client access (client cert + user password), LDAP client access, etc. Maybe there are security issues in client authentication which they're aware of. If so, they should share them. But simply labeling client authentication as "obsolete" shows a close-minded attitude.