Interesting point re: authentication vs. authorization. In the situation of an iris scan as authentication, what then becomes the authorization? Multi-factor bi

Interesting point re: authentication vs. authorization. In the situation of an iris scan as authentication, what then becomes the authorization? Multi-factor biometrics, some sort of 2/3/4fa scan? Broadly speaking, solutions to that problem which involve more biometric data make me uncomfortable, in no small part because I just don't trust the people who operate the systems. Don't know on the passport thing, although my gut says no. Do you mean people just having a passport in general, so say an iris scan pulls your passport data & cross references it against a camera at the ATM? Or having it physically on you so its RFID chip is read? I've just started thinking/learning about these sorts of problems, so as of now I don't have many opinions on how things should be done haha.