@b0rk I tend to think of it as TLS but backwards, where you (the user/client) control the private key rather than than the server.