[HelloNurse]

On the other hand, a customer who doesn't realize that their private key should never leave their premises has no business asking for a certificate. It's like not selling guns to children.

[u801e]

While that may be true, that doesn't mean the rest of us shouldn't have the option of using certificate based authentication.

[HelloNurse]

We have the option of using certificates, but not the option of giving away private keys.