> 2. No biometrics - Doesn't survive rubber-hose cryptanalysis. Easily impersonated. Also, biometrics generally can't be revoked. Not nearly enough attention i

> 2. No biometrics - Doesn't survive rubber-hose cryptanalysis. Easily impersonated. Also, biometrics generally can't be revoked. Not nearly enough attention is paid to that, and it's very important, IMO. In the extreme case, let's say you're using actual DNA. On the surface, that looks impregnable to anyone but maybe your identical twin (barring the "rubber hose" thing, of course). In practice, anyone who's hacked a genealogy site (as happened quite recently with 23andMe, IIRC), or who's managed to grab your used coffee cup or cigarette butt pwns you forever.