ID "theft" -- so what?

[Dan Kaminsky]

>This is yet more reason why I propose that you authorize transactions
>with public keys and not with the use of identity information. The
>identity information is widely available and passes through too many
>hands to be considered "secret" in any way, but a key on a token never
>will pass through anyone's hands under ordinary circumstances.
>
>  
>
It's 2005, PKI doesn't work, the horse is dead.  The credit-card sized 
number dispensers under development are likely to be what comes next.

Amusingly, your face is an asymmetric authenticator -- easy to 
recognize, hard to spoof.

--Dan


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com