Re: Passphrases v Password

[Rich Graves <rgraves () CARLETON EDU>]

"Will Froning" <will.froning () gmail com> said:

> tiqr.org and https://www.toopher.com/  [and YubiKeys]

We use DuoSecurity, not nearly free, but not bad (and internet2.edu has a volume deal). The "push" callback for Android 
and iPhone is terrific, as is the integration with various systems.

What I want next is a "remember this web browser" plug-in for gluu.org (contract support for Shibboleth+OpenID). I'm 
disappointed they don't already have one. I want to accept passwords from certain ASNs and "known-by-permanent-cookie" 
web browsers, but dual-factor where the risk is greater.
-- 
Rich Graves http://claimid.com/rcgraves
Carleton.edu Sr UNIX and Security Admin