If someone would just do the signing-dongle thing in a user friendly way, maybe plugging/unplugging that is closer to authenticating the user ('something they h

If someone would just do the signing-dongle thing in a user friendly way, maybe plugging/unplugging that is closer to authenticating the user ('something they have': the dongle, 'something they know': a passphrase to activate the dongle on plugin). Then the browser could use that as the signer/verifier. I do something similar with a standard usb drive and pageant + portable putty/winscp.