Two-Factor Authentication
In this talk Why a change is being proposed What is the proposed change A request for feedback 2
Why is a change being made? X.509 Certificates have been used since 2002 for MyAPNIC Highly secure, but difficult to work with A common theme in feedback is to make a change 3
What is the proposed change? X.509 Certificates are a form of two-factor authentication The APNIC Secretariat will implement an alternative form: –Open standards based “TOTP” –Open implementations of authentication devices exist X.509 and TOTP will work side-by-side as alternatives 4
How will it work? Choose your authentication mechanism –Switching to TOTP is an option Choose your authentication device –Wide support for smart phones Activate TOTP on your APNIC user account 5
Logging in with TOTP User ID and password continue as normal You will be prompted for a six-digit code Your smart phone will provide you with the code 6
A request for feedback Is this work the APNIC membership would like to see done? Would the membership like X.509 support retained beyond a transition period as a choice? Does the membership agree with the proposal to use TOTP? Blog post up on this subject – –Please leave your feedback! 7
8