@Edent There's a lot I don't like about Gemini but something I do like, at least in principle as I haven't used it in practice, is the use of client-side certificates (or just key pairs?) for identity. Obviously, that's possible with HTTPS as well but I don't think either standard browsers or web servers make it easy which is a great pity.