[BoyWizard]

Handling them in the browser is a good idea, but still needs a lot of work to make it workable:

- What happens when their computer crashes?

- How do they transfer these certificates to other devices (multiple computers, phones, tablets, etc)?

- How do they keep them in sync across multiple devices if they need to regenerate the certificate?

- Certificates would be super easy to steal once you get access to a device (arguably easier to steal than installing a keylogger to get passwords)

The only way I can see it working for most users is through a third-party management solution (Google, iCloud, whatever).