Re: [SAGE] Security tokens

[John Sellens <jsellens@generalconcepts.com>]

| From: Jim Hickstein <jxh@jxh.com>
| 
| There is far too much laxity here about 
| keeping passwords secret, even if they're strong.
| ...  Forcing them in 
| this case to surrender the one device that gives them their own access, 
| i.e. making it non-duplicable, is the only way I can see to stop this.

Jim's point here is important, and often overlooked.  A token prevents
people from sharing passwords (easily) and helps ensure that all your
"role based" access rules on the network don't get trivially bypassed
by someone "just trying to help".

Remember: sometimes we do things to protect ourselves from other
people, and sometimes we do things to protect ourselves from ourselves.

John