[link|http://weblogs.asp.net/robert_hensing/archive/2004/10/22/246364.aspx|http://weblogs.asp.n...10/22/246364.aspx], which leads to other blog posts.
I tend to agree with you, Peter, that phrases are the best "happy medium" between cryptographic security and social security.