CGI and client certificate, or do we need a CGI spec

[colecmac at protonmail.com]

One important thing to standardize is how TLS_CLIENT_HASH is
calculated. Otherwise CGI scripts will not be able to recognize
clients again if the server software changes.

makeworld