Sounds like he's talking about mTLS/client certificates. https://blog.mozilla.org/security/2021/07/28/making-client-c...