How secure is your password?

[kandrathe]

For me it depends on how it is implemented.

I'm a big fan of public/private key signature technology like PGP. I think one would subscribe to a trusted purveyor of the public side of the key, much as how SSL works now with companies like Thawte, or Verisign. The private side of the digital key would also need to be kept by you at a secure place. Your true identity would only be verified with a combination of your secret pass phrase, the private key, the public key and selected consistent biometric data that is easily scanned and not fakeable(eg. iris). It would be nice if you could use the same type of system in an electronic key fob so one would be able to use it in any door, or device.

Tracking or databasing electronic transactions is an entirely different problem. Frankly, I am more worried about the state of things now. Now it is very easy to forge an identity. Or, with very little information, assume one. Far too often even the experts, like Equifax, get peoples credit, and legal history information muddled together. I would rather that all my electronic transaction's identifiers pointed to a secure anonymous electronic "vault" that I owned, rather than the corporate constructed free for all it is now.