That’s what we do for nos.social but it doesn’t work for the web. I think a more natural thing for users is an oauth service that lets users login with username / password or keypass and then that service would sign events.