I have spent some time this weekend investigating SSL certificate-based authentication and implementing it in Kolab web-based user interface.
This topic is very interesting, but definitely too broad to be briefly described in a single blog post, so do not look at it as complete solution, but treat it only as a proof of concept.