Accept the key isn't tied to you account when you buy it and you don't have to buy from google... > Consumer provisioning should allow users to buy a compliant

Accept the key isn't tied to you account when you buy it and you don't have to buy from google... > Consumer provisioning should allow users to buy a compliant token from a vendor of their choice, insert it into a computer where they’re already authenticated to a website, and register their token with a single mouse click. http://www.computer.org/cms/Computer.org/ComputingNow/pdfs/AuthenticationAtScale.pdf http://www.computer.org/cms/Computer.org/ComputingNow/pdfs/A... Furthermore there are no serial number exchanged afaict, so the key itself isn't identified by the server, only the fact it has valid credentials.