Signing TLS handshakes inside a TPM

What happened

A client certificate whose private key stays in the TPM: what crypto/tls asks of a key, the Go for both ends, and what it costs per handshake.

Summary assembled by rule from the sources below

Timeline

1. 21:05
   First appeared on Hacker NewsHHacker News
2. 14:54
   Discussion started on LobstersLLobsters

Sources