Today I learned about TrustBearer (thanks Berend). TrustBearer combines openid authentication with smartcard authentication. Setting this up is very easy. 1) sign up for an openid at http://openid.trustbearer.com/ 2) pair your cert with the new account You have to install a Firefox extension that does the certificate stuff. 3) logged in and ready to go 4) try it at a openid consumer 5) present your openid and smartcard 6) nice Still what I like most in this use case is that the certificate is on