On: Why aren’t we using SSH for everything?

[mikeash]

Also, security is more than identity. You still need to be robust against malicious input even if you know exactly who all your users are.

[dvanduzer → mikeash]

Indeed. The third leg that solves this problem is known to the industry as Accounting.