I love tautological statements like this: > Once adopted by other websites, Tru.ly could replace the OpenID, oAuth or Facebook Connect as the next evolution of

I love tautological statements like this: > Once adopted by other websites, Tru.ly could replace the OpenID, oAuth or Facebook Connect as the next evolution of an official login. Once it's widely adopted, it'll be widely adopted! Once my startup makes it big, it'll be big! And I just don't understand claims like this from a security standpoint: > With Tru.ly, you can even use a QR reader on your phone to validate a Tru.ly user on the spot as everyone who signs up gets their own QR code. Do people think that previous attempts to verify your "real id" have failed because the proponents were stupid, or because it is an incredibly difficult problem, verging on intractable? EDIT: to the downvoters, it's difficult to even verify the identity of a website, much less humans: http://www.schneier.com/blog/archives/2008/12/forging_ssl_cer.html http://www.schneier.com/blog/archives/2008/12/forging_ssl_ce...