[ARIN-consult] Consultation on Password Security for ARIN Online Accounts

[David Farmer]

I personally use ARIN 2FA and the other persons with ARIN online
accounts for our organization also use 2FA.  However, there is no way, at
least that I know of, to require accounts associated with our
Organization to have 2FA enabled. So, even if ARIN were to not require all
accounts to use 2FA, it would be great to be able to require it at an
Organization level.

Further, I support implementing 800-63 controls as well.

Thanks.

On Tue, Feb 16, 2021 at 3:58 PM Matt Harris <matt at netfire.net> wrote:

> Hey Heather,
> Yepp, as you can see, the system for supporting it already exists and some
> (perhaps many?) of us are already taking advantage of it. So the next step
> would be to push it as a requirement for accounts which control resources
> such as IPv4, IPv6, and AS numbers in order to entirely prevent
> the brute-force attacks which were the original onus for this discussion.
>
>  - Matt
>
> Matt Harris​
> | Infrastructure Lead Engineer
> 816‑256‑5446
> | Direct
> Looking for something?
> *Helpdesk Portal* <https://help.netfire.net/>
> | *Email Support* <help at netfire.net>
> | *Billing Portal* <https://my.netfire.net/>
> We build and deliver end‑to‑end IT solutions.
> On Tue, Feb 16, 2021 at 3:30 PM Heather Schiller <has at google.com> wrote:
>
>>
>> 2FA like this?
>> https://www.arin.net/reference/materials/security/twofactor/
>>
>
> _______________________________________________
> ARIN-Consult
> You are receiving this message because you are subscribed to the ARIN
> Consult Mailing
> List (ARIN-consult at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> https://lists.arin.net/mailman/listinfo/arin-consult Please contact the
> ARIN Member Services
> Help Desk at info at arin.net if you experience any issues.
>


-- 
===============================================
David Farmer               Email:farmer at umn.edu
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-consult/attachments/20210216/965b767e/attachment-0001.htm>