> the main reason client cents aren’t adopted I agree with the UI objection, but not the cost objection. But my principal objection is the same as my objectio

> the main reason client cents aren’t adopted I agree with the UI objection, but not the cost objection. But my principal objection is the same as my objection to WoT: I want my certificate to identify me as the holder of the certificate, and nothing else. Nearly all issuers of client certs insist that you provide driving license, bank statements or whatever, to tie the certificate to me as an identifiable individual person. Most relying entities have the same expectation. That binding to a real person is quite separable from the idea of a client certificate, but in practice usage of client certs always seems to rely on that binding.