We're making it easier for people to have some form of strong authentication. The device that you normally carry can now be your token.

Often times the topic of the level of authentication to create these models (of commerce) deteriorates into a presumption that there is an extreme choice to be made between true proof of personal identity and anonymity.

Users will get the benefit of stronger security while taking advantage of the devices they already have. And consumer-facing account providers and enterprises will have a flexible mechanism to arm their customers with stronger authentication without having to procure and deliver standalone tokens.

It is not surprising that business users feel more secure online than consumers, with an array of firewalls and other defensive measures in place around them, but it is astonishing to see the extent to which both groups are willing to assume some level of risk in their transactions.

In the pursuit of convenience and cost savings, businesses and their customers are knowingly making themselves more vulnerable to identity theft. Security is failing to keep pace with what end-users wish to do online.

I was surprised that many people care about the issue.