Well, this is a bad example, considering public/private key pairs exist,
and work for identity validation,
as long as you don't farm it out to a cheap, know-nothing vendor.