SanityInAnarchy writes "My current bank uses yet more wish-it-was-twofactor security — neglecting EV certs and same-domain SSL for a pile of security questions. At this point, PayPal is both more secure (everything is https://www.paypal.com/) and more convenient.
There have to be some banks that get this right — using a physical token (instead of my mother's maiden name), pervasive SSL, and allowing the browser's back button to work. Which ones do Slashdotters use? Preferably something in the US, with US currency..."