twitter's PKI auth

[[
The new two-factor system works like this. A user enrolls using the mobile
app, which generates a 2048-bit RSA keypair. The private key lives on the
phone itself, and the public key is uploaded to Twitter’s server.
]]

http://www.wired.com/threatlevel/2013/08/twitter-new-two-facto/?mbid=social10522764