Comment by gandalfu

Why certificate based authentication wasn't included?

The server stores the public cert from all clients and uses it to authenticate at the transport layer. No shared secrets either.