It maybe sounds strange, but if you can correct me and provide the right solution, please do it.
I heard that Ettercap can sniff HTTPS open encryption key and user's data. So, how to make server with rich internet application more safe with HTTPS? Maybe it is better if user is setting up given client certificate manually? Sounds uncomfortable for the user.
So, if you know better solution, it is interesting. If not, please tell me: how to force Nginx just to check that user is having the client certificate, not give it to him?