Tis a shame web browsers are only able to use Kerberos to authenticate connections and not additionally to provide confidentiality and protect the integrity of

Tis a shame web browsers are only able to use Kerberos to authenticate connections and not additionally to provide confidentiality and protect the integrity of the communications channel. Certificates are pain in the arse and it depresses me that we still don't have a way to deal with compromised private keys.