So the article states that my bank won't even ask for my usr/pwd and this is comforting considering that many win machines are riddled with spyware/malware. So they can tell if a machine is trusted but how does the machine know what software is trusted? "Oh, this machine is trusted; let's connect. By the way, here are a few ports that are open. Oh, you want to do remote registry editing? No prob. I'll hook that up." Good initiative, bad judgment. The pushers of this initiative should be stamped on the forehead. Let's just roll this up in the patriot act while we're at it.