[bawolff]

That's far from clear. XMPP is still probably a minor use caee of client certificates.

[kalleboo]

Yeah buy why would anyone go through the trouble of bootstrapping a whole new PKI instead of just flipping an if statement?

I'm curious what other use cases there have been for domain-validated client certs aside from XMPP.