I've been thinking along these lines for a while. The whole "factors of authentication", where higher=better is no longer a good summary of the underlying compl

I've been thinking along these lines for a while. The whole "factors of authentication", where higher=better is no longer a good summary of the underlying complexity in modern authn systems. We need better terminology.