gme (he/him) :verified_gay: on Nostr: feld Well, if the Private Key is not marked exportable you pretty much can tie a ...

feld (npub1yck…ujmw) Well, if the Private Key is not marked exportable you pretty much can tie a certificate to a physical machine then. So now you're authenticating both the user and the machine (so long as the cert is in the user's certificate store and not the machine's certificate store). Just guessing but that's probably why.