On: Why is nobody using SSL Client Certificates?

[ww520]

Usually what are the ways to authenticate the user when generating a new cert?

A user moving to a new browser has to identify himself as the real user, thus requiring some sort of authentication. It's a chicken and egg thing.

[alexchamberlain → ww520]

Automated call? Automated text?

[throwaway64 → ww520]

an emailed code is usually the prefered method, however depending on your needs a text message or account details may work