I really thought passwords would be dead by now, I'm amazed they're still the primary authentication mechanism. Public key is trivial to do these days, it's don

I really thought passwords would be dead by now, I'm amazed they're still the primary authentication mechanism. Public key is trivial to do these days, it's done by browsers all the time to secure communications but not to authenticate who you are. The article focused on the client side hardware, the cards that hold your private key, but the big issue is websites themselves. Sites need to switch from "enter a password:" to "upload your public key:"