Can Identity of a website be authenticated without mutually authenticating the user and the website

Thanks for your comment Mr. shailender....even i agree that both biometrics and password can be combined for better authentication process....

Ramdas, the fact that Identity is transmitted on an unauthenticated channel, even in current 2 factor solutions, is the root cause of teh problem of theft.

The USB tokens etc, issued by companies to financial institutions only add another changing password for the MITM to steal. How deos the user know that he is at the correct ban website or there is noone in between him and the bank stealing what he is entering?

In my opinion, Biometrics is a safer way, but the probem is that Biometrcis is the same for all your relatioships. Passwords, as in two factor, are changing in nature, so they are good as long as they change. But passwords can be stolen, Biometric cannot be stolen. So the idea is to combine these two.

Mutual Authentication - a new concept being studied by the Naval Postgraduate School alongwith the DoD, US - changes the game forever. It authenticates the end points before any credentials are shared. This is based on existing mathematical frameworks such as SPEKE and DH.

Yes i agree with you Mr. Shailender, most of the employees at many companies, especially financial institutions and other environments, use multifactor authentication, which requires at least 2 items something users have, such as a USB token or smart card, and something they know, perhaps a PIN to gain access to company resources. The requirement for a combination of 2 authentication factors means stronger protection for the company resources, the whole 2 factor authentication solution also stores user credential information on the token or smart card or in a software program on the client machine, users gain easier access to resources (e.g., email, company data and devices, Web sites that require logon) and the Help desk benefits by fielding fewer calls about forgotten passwords. 

And one question Mr. Shailender how much do you think the Biometrics plays in this authentication factor???