title: Biometric fingerprints for logging into a website
body: <p>Is there a way to authenticate to a website using fingerprints?</p>
  
  <p>I was thinking of the following scenario.</p>
  
  <ul>
  <li>The server has ISO 19794-2 fingerprint templates of all valid users.</li>
  <li>Client machine has a fingerprint scanner.</li>
  <li>Client opens website on browser</li>
  <li>Browser has Java Applet/ActiveX control/HTML5 object gets fingerprint template from the scanner &amp; sends to website.</li>
  <li>Website allows/disallows based on fingerprint.</li>
  </ul>
  
  <p>However, this seems very insecure. It's not difficult to get a jpg of someone elses fingerprint and convert it into ISO 19794-2 template of the same. Then programmatic-ally one can login to the website by sending the userid &amp; template to the website.</p>
  
  <p>Is there a secure algorithm/design for allowing people to login to a website using fingerprints?</p>