Earlier quoted context omitted.
And how many people have those? With appropriate knowledge of how to generate, store, sign, backup, and secure the keys? On the front page of HN at the moment we have "we lost millions of dollars of Oracle DB due to key management issues". Key management is hard . Every few months a crypto exchange discovers this by either leaking or entirely losing their keys. It's basically just people with Estonian e-identity card…
> With appropriate knowledge of how to generate, store, sign, backup, and secure the keys? I believe this could be solved by improving the interface used to accomplish these tasks (rather than using openssl req directly). Web browsers ask to save passwords and other sensitive information. There's no reason why they cannot relatively securely store a private key and the associated certificates. > Key management is har…
The big ones have supported this for two decades: https://www.digicert.com/managing-client-certificates.htm
Hardly anywhere uses it.