That was an extremely interesting read, although I must admit I'm glad I never came across it in the wild. I wonder how things could be different if client certificates were more widely embraced? It could be useful to prevent social media account hijackings