[djtriptych]

All of my cards have excellent theft protection policies though. If my card gets stolen, I'm not responsible for any damages. That's a great security policy; better than most websites.

They _assume_ card numbers will get stolen all the time and invest in identifying suspicious behavior. And all behavior is 100% auditable all the time. Security isn't just about authentication/authorization. I wish more websites assumed passwords might get phished and thought through how to protect users in that case.

My credit card numbers are one of my pieces of private information I feel _least_ apprehensive about sharing.

[krupan]

Thing is, you pay for that cc number protection with every transaction. How are you going to pay for the same sort of protection on your password?