In relation to another question, I also believe using a private key and extensions is very difficult for adoption, and think that is probably the largest barrier.. Ideally we have a way to use passwords and a way for people to not have to manage their private keys, if they don't want to.