The Netbadge interface University students use to login to their e-mail and Collab accounts will get a new look tomorrow, said Mike McPherson, associate vice president and deputy chief information officer.
The subtle changes will make the digital certificate option more noticeable and prominent to encourage students and University faculty and staff to login using that shortcut instead of typing in their passwords, McPherson said.
"Digital certificates provide lots of protection against phishing because when you use a digital certificate your password never actually gets transmitted," McPherson said.
In a few months the University will switch over to Netbadge 2, which will allow users to set up security questions to provide a higher level of assurance that they are who they say they are, McPherson added. All University community members will have to attend an identity clinic to meet with IT personnel to set up their security questions. First-year students were "identity-proofed" earlier this year, McPherson said.
"You take a government photo ID and prove to a human being that you are who you say you are," he said. "Then you are given a piece of paper with a one-time password, which is only good for logging in the one time to give the answers to set up your security process. It's pretty quick, just a few minutes for students."
McPherson said University accounts suffer frequent e-mail attacks in which phishers ask students to enter their names and passwords to "verify" their accounts.
"People occasionally fall for it, and so it's a serious problem," he said.
The first clinic will be at the University flu vaccination clinic Oct. 26. Clinics will continue to run through November and December. For more information about the clinics, students can visit the Web site of the Information Technology and Communication office.
Students who do not complete their ID verification will automatically use their social security number as a security question, according to ITC's Web site.
-compiled by Kevin Mead