[Eril-l] 2-step verification from Atypon

[Bigwood, David]

SMS messaging is also a weak form of 2FA. It is vulnerable to SIM swapping. App or physical keys are much more secure. Still any form of additional security is an improvement. How to make it user-friendly in an institutional setting is something that needs to be worked out.

Sincerely,
David Bigwood
dbigwood at hou.usra.edu<mailto:dbigwood at hou.usra.edu>
Lunar and Planetary Institute


From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Tom Pollard
Sent: Wednesday, September 06, 2017 9:19 AM
To: Mark Winek; eril-l at lists.eril-l.org
Subject: Re: [Eril-l] 2-step verification from Atypon

Hi

As a publisher on the Atypon platform, we really appreciate the additional security measures they have put in place to maintain the integrity of our customer accounts. Having said that, SMS-based 2-factor authentication (2FA) has not been without its difficulties.

The next major update to the platform is bringing in two alternative methods of 2FA (i.e. email, app-based) which should enable every institutional administrator to find a method that works for them. It is of course up to individual publishers to evaluate and implement each method, but we’re certainly looking forward to smoothing out some of the wrinkles caused by the current method.

Regards

Tom

Tom Pollard
Content Development Director

Mark Allen Group, St. Jude's Church, Dulwich Road, London, SE24 0PB, United Kingdom
Tel: + 44 (0)20 7501 6707  |  Mob: +44 (0)7980 609824  |  Web: www.markallengroup.com<http://www.markallengroup.com/>


________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20170906/0ca107c2/attachment-0001.html>