Alternatives

• Identify the user, not the computer

• Realistically, this means passwords

• For web applications we have Raven

• • but that only works for HTTP+Browser
  • could issue other passwords