[4936] in cryptography@c2.net mail archive
Re: personal encryption? (fwd)
daemon@ATHENA.MIT.EDU (Dan Geer)
Tue Jun 22 16:56:15 1999
To: Marc Horowitz <marc@mit.edu>
Cc: cryptography@c2.net
In-Reply-To: Your message of "22 Jun 1999 02:25:01 EDT."
<t53emj4wy4i.fsf@horowitz.ne.mediaone.net>
Date: Tue, 22 Jun 1999 16:39:09 -0400
From: Dan Geer <geer@world.std.com>
Do you imply having a machine with PCR's for some unique string in the
authenticator's DNA? I see two problems. First, twins. Second, it's
possible to grow DNA from fingernail clippings, hair, etc. It would
be like habitually writing your password down on everything you
touched :-)
1. quoting Schneier verbatim, "BIOMETRICS ARE NOT SECRETS"
2. for the ordinary Joe, never understimate the lure of convenience
--dan
