The real problem is when it becomes a mandatory authentication system. We've all seen the ridiculous password requirements some sites have, that in reality offe

The real problem is when it becomes a mandatory authentication system. We've all seen the ridiculous password requirements some sites have, that in reality offer no additional protection -- and their implementations are often questionable; Chase Bank still is case insensitive for example. All it will take is for someone to think it's a good idea, and make a push for that as a standard.