Its 2022. Do we really still need a consultation on why mandatory 2FA is a good thing ? Even more so for something like ARIN ?
While it's probably obvious to most of us that mandatory 2fa is a good thing, I think it should be likewise clear that community consultation is also a very good thing as a general practice for changes such as this. A good example is that several folks in the context of this discussion on the ARIN-CONSULT list have voiced concerns related to SMS as the secondary method, and others of us have discussed options which may be superior for a variety of reasons.
- mdh
