In 2001 I worked on a project for some of the federal agencies that used remote biometrics for authentication in addition to password use. I'm not sure if it wa

In 2001 I worked on a project for some of the federal agencies that used remote biometrics for authentication in addition to password use. I'm not sure if it was safe from replay attacks, but still. It wasn't that the feds didn't know how to make things secure, it's just that the workers in the civilian side of the government didn't really understand the threats and didn't prioritize security. Edit: Not to say everywhere in the non-civilian side of the government is secure. It isn't. Just that there are pockets of it that are better hardened that we could just wholesale copy.