With regards to exporting and importing: The idea is definitely not any more dangerous than the already existant functionality for `&lt;input type=&quot;file&quot;&gt;`.<p>And yes, of course in real life such features would be designed in such a way that the site can only access the entries relevant to itself. I do agree that the article was a bit loose in its language here. But why you would ever think that a standard would give more flexibility to <i>certificates</i> than it does <i>cookies</i>?