Re: Two-Factor Authentication: Quick Poll

[Rich Graves <rgraves () CARLETON EDU>]

> 1 Is your campus using, or does it plan to use, Two-Factor authentication for its most privileged users (e.g., system 
> administrators logging in remotely)? 

Followup discussion has made it clear that you need to define "remotely."

If you define "remotely" as "from outside the campus or internal firewall boundary," yes, we are mostly there.

For internal network access, passwords win, due to limitations mentioned by Joel and others.

A GULP-like system is important regardless of the meaning of "remotely." We are also getting better at separating the 
everyday password (subject to phishing and malware) from privileged logons.

> 2 Do you think you should? 

Yes.