This article details how to securely sign TLS handshakes by keeping a client certificate's private key inside a Trusted Platform Module. It explains the specific requirements of Go's crypto/tls package and provides the necessary implementation for both client and server endpoints. Additionally, the piece evaluates the performance overhead and computational costs associated with each handshake.