What about PKI? Why don't more sites support this? Especially banks. In the absence of more universal adoption banks should be acting as CA's and issuing PKI certificates for secure access to their own service. Browsers already support it and it works tremendously well. You know what I would love to see? Smart Card driver's licences with identity certificates on them.