I would particularly like to see strong authentication (two-stage or otherwise) as the rule for all applications, and especially for banking applications. I would like this to be done in a framework that would concern any connection without taking into account a previous connection that occurred one day, one week or one month before. This is certainly restrictive, but the security of our authentications depends on it.