Friday, July 22, 2011

[ipilgymx] Brick and mortar password storage

The more difficult you make it for adversaries to access your data (e.g., cryptography), the more likely you might accidentally lose access yourself (forgetting a long master passphrase you rarely use).

Create a brick and mortar physical service (a store) for saving passwords.  Kind of like a bank, but for information.  The store gathers a lot of biometric information (fingerprints, very high resolution photograph, videotaped interview for voice, language, laugh, gait samples) when you establish your account, and uses it to verify your identity when you return, seeking the password that you stored with them.

Protocols to run such a business securely are left as an exercise to the reader.

Do we need changes in the law to protect against subpoena, or is the attorney-client privileged communication framework enough?  (Or doctor-patient?)

No comments :