This is a meta issue of security-related tickets. Please don't add comments to it, but create new tickets for issues that don't already exist and link to this one.
SSL client certificate authentication is missing in the list and would be definitively nice. We use it a lot for auth against API enspoints.
@Bonscho - looks like we missed the description in this issue which exists in the other meta issues (just added it). Please open a ticket instead of commenting here.
Most helpful comment
SSL client certificate authentication is missing in the list and would be definitively nice. We use it a lot for auth against API enspoints.