[lmm]

If there's no point improving client authentication until you've improved website security and no point improving website security until you've improved client authentication then neither will ever get better.