should be optional

There are those for whom this would be a boon. My father, bless his rather antiquarian ways, would be one of them. He only accesses the 'intaweb' from one spot, his home PC, and currently he is a little scared of online transactions, although he has recently started, but banking - woo, that's a bit too far at the moment, and this would give him the reassurance he needs. But for those of us who use more than one machine in the world - No thank you.

I'd much rather either a) be responsible for not being phished, or if a middle ground is required, b) have a list of 'acceptable IPs/ranges/hostnames' for logging in from (using my current details). I am perfectly happy not to have the complete freedom to log in from random internet cafes, as quite frankly that is a little brave, to say the least, but I guess it would need some form of method for updating the ranges in real time. I think they have a new device called the telephone for that sort of thing.

Not to mention that this will completely bugger up the egg style password safes - although I still haven't quite got over being told by their security techs that there were no plans to ever ever support firefox or other browsers due to lack of security compared to IE6, so perhaps that is no great loss after all:)