Basic Auth with digests has some issues, but both that and client certs mostly fail because of poor browser implementation. Client certs would really be ideal

Basic Auth with digests has some issues, but both that and client certs mostly fail because of poor browser implementation. Client certs would really be ideal if browsers handled them better and sync'd the certs between devices (like bookmarks), but I guess that still wouldn't solve the signing in from a new/different (non-synced) device.