[dboreham]

This is how web auth was supposed to work. It turned out to be too hard to deploy outside of enterprises.

U2F is the modern re-do of client certs.