Originally Posted by Andrew H.
Realistically, of course, the problem is that the traditional username/password scheme, which was developed when people would have *one* account, and which still worked okay when people had a couple of accounts, is almost completely unworkable when people need 100+ different username/password combinations for various sites.
Right. Something you have + something you know is the best possible security solution. I like the RSA solution (though it has failed) and the PKI token. Still, this is not only a computer problem. We live in an age when people walk onto school buses wearing bombs and enter schools with guns. There is risk in taking sides. It just might be prudent to separate your political self from your family life if you are going to offend unknown persons.