Client-side certificates are pretty much a requirement within the U.S. DoD space.  And the CAC (smartcard used for logins and ID) are widely deployed right now and used for authentication to such sites.  To say that we need to do away with cert auth is a non-starter, given how much gov&#x27;t buy-in and money has been used to roll these out.  The real solution is to fix the support and standards in the various browsers to make all of these &quot;issues&quot; a moot point.<p>If you&#x27;ve got a TRUSTED certificate authority (your definition of &quot;trust&quot; may vary) and secure key storage (PKCS#11 smartcard, etc.) then certificate-based authentication gives you a tremendous amount of authentication security.