Comment by xaedes

Do I read that right? 1 in 1000 are false positives? Does that mean 1 in 1000 users can log in as another by chance?

That is no authentication scheme then.