HTML5 has the element that sends an SPKAC to the server (as I understand it).
But how do you do it in IE?
One CA's websites gives me the following prompt:
This Web site is attempting to perform a digital certificate operation on your behalf: https://www.startssl.com/ You should only allow known Web sites to perform digital certificate operations on your behalf. Do you want to allow this operation?
That's cool and all but how do they do it and how do I make it so a website of mine can generate private keys for people? IE doesn't support the keygen element.