[ARIN-Suggestions] Suggestion 2022.28 is now closed

[ARIN]

A new response from ARIN has been posted for suggestion 2022.28: Add Email as a Two-Factor Authentication Method and this suggestion is now closed. You may find the original suggestion and the response from ARIN below. 
 
Regards, 
 
American Registry for Internet Numbers (ARIN) 
 
---------- 
ACSP Suggestion 2022.28: Add Email as a Two-Factor Authentication Method
https://arin.net/participate/community/acsp/suggestions/2022/2022-28/

Author: Al Whaley   
 
Description: Allow email for 2FA (two factor authentication) for accessing an ARIN account.
 
Value to Community: Many of us are not allowed to use personal cell phones for professional work, a restriction that seems appropriate. Limiting authentication to cell phones is not professional. Using work emails is professional. Security is generally better with email than with SMS. At a minimum email should be an option for 2FA for accessing our ARIN accounts.
 
Status: Closed   
 
ARIN Response: Thank you for your suggestion, numbered 2022.28, in which you requested that ARIN allow the use of email for two-factor authentication (2FA). This suggestion was brought forward during a community consultation in January 2023. However, after careful consideration of the concerns expressed by the community, alongside reservations from ARIN's Engineering Department and Chief Information Security Officer, ARIN has decided against introducing email as an authentication method for ARIN Online.
 
We understand the importance of providing secure and convenient authentication options for our users. It's essential to clarify that SMS is not the sole method for 2FA within ARIN Online. We also support hardware or software tokens using Time-based One-time Password authentication as an alternative, which results in a range of choices to accommodate different user preferences and security needs.
 
Given this decision, we are closing this suggestion. We appreciate your active participation in the ARIN Consultation and Suggestion Process and your commitment to enhancing the security and usability of ARIN Online. 
 
Thank you, 
 
John Curran
President and CEO
American Registry for Internet Numbers