imo, biometrics are a user experience and an authorization method, but not an authentication method, as they are not consistent enough to provide cryptographic

imo, biometrics are a user experience and an authorization method, but not an authentication method, as they are not consistent enough to provide cryptographic inputs themselves. I read the paper showing how to do it years ago, but the entropy of the inputs (after sampling the image) reduces it to a dependency on the encoding system and not the key, as per kirkhoff's principles. sure you can use them to unlock a key, but it's just a ritualistic UX based on magical thinking. that you have to effectively dance for some bureaucrat to transact makes me unsympathetic to biometrics anywhere, and the adoption of alternatives more urgent.