[therealplato]

Client certificates are required with every http/s request. Back in 2021 we've never logged in with user/pass

[_joel]

That sounds horrendous imho, how would it be administered and what privacy concerns would there be.