I'm now comfortable generating public and private keys for each user of a website.
Is there any pro's / con's for generating the Private keys on the client in the browser or on the server?
And once generated is there any best practices for safely storing the users key?
I feel we need to store the key for the user as they can't be trusted to keep it safe and not lose it.
The connection to the website is all over SSL and the data center is ISO-27001 certified.