>that suggests that all current implementations are crap Except the one time I've seen it in the wild, the implementation/UX was surprisingly good. Turns out F

>that suggests that all current implementations are crap Except the one time I've seen it in the wild, the implementation/UX was surprisingly good. Turns out Firefox can generate a cert entirely client-side and install it via Javascript. Chrome draws from whatever cert storage the underlying OS offers, so it should be as simple as saving the cert file to disk and opening it. Mobile might pose a problem. Would have to try it out.