I was just about to say the same thing. The only cases where I have seen successful rollouts of client certificates have involved something like a CAC. It is s

I was just about to say the same thing. The only cases where I have seen successful rollouts of client certificates have involved something like a CAC. It is still clumsy and painful, and I doubt many users would volunteer for a similar approach.