I experimented with an alternative HTTP authentication scheme (like basic or digest, using the &quot;WWW-Authenticate&quot; header) that used ssh keys to authenticate the client.  Some of the idea was based on this Joyent blog [0] post about signing the date header, but more robust and meant for a user rather than scripted access.  The idea was that the browser would interface with a specific ssh-agent with specific keys loaded for specific sites.<p>Unfortunately, I didn&#x27;t get very far and stopped working on it a while ago, but one thing I did learn was that the source code for links was much easier to come up to speed on and use for rough experiments than the source code for a full-on graphical browser.<p>I still have notes for it... somewhere.<p>[0] <a href="http:&#x2F;&#x2F;joyeur.com&#x2F;2012&#x2F;01&#x2F;03&#x2F;a-bit-more-about-the-new-joyent-cloud-api&#x2F;" rel="nofollow">http:&#x2F;&#x2F;joyeur.com&#x2F;2012&#x2F;01&#x2F;03&#x2F;a-bit-more-about-the-new-joyent...</a>