Is there any security enhancement when I use self-signed client certificate for TLS mutual authentication?
There is an additional layer of security with user authentication on the application layer. And the user authentication will be granted only if the presented client certificate is the same as the one presented on the user registration phase.
- Origin-bound certificate might be another form of this approach.
- The way Syncthing manages device IDs also looks similar.