DoD (DoW whatever) has been running the CAC PKI infrastructure for over 20 years, and believe me a good deal of their three quarters of a million employees have no idea what PKI or keypairs are but use it to log into their workstation and do all sorts of online identity validation every single day.
https://www.cac.mil/common-access-card/
I'm not saying the gov is competent in general btw, but they are actually far better about this area than private industry, in my direct experience.
I'm not saying the gov is competent in general btw, but they are actually far better about this area than private industry, in my direct experience.