Hacker News Reader

Safari is terrible with client certs - it seems to store the default on a per page basis rather than per domain. Changing that involves diving deep into keychain.

Chrome usually works but yesterday a colleague had problems where the dialog asking which cert to use wouldn’t respond.

Firefox just works.

It’s a shame that certificates aren’t used more widely. They don’t work at all in captive portal pages on OS X or iphones :(

I've always used the security.enterprise_roots.enabled flag for this, is this new one different?

From the property name it sounds like your property is about trust roots (CAs) and parent's about client certificates (for mutual TLS authentication).

THANK GOD. Now I can 95% swap to Mozilla Firefox for work as well.