Any final decision regarding yubikeys? It would be a nice feature.

Thanks for point out GoogleAuth to me, it was exactly what I was looking for.

Don't care too much for Yubikey on three grounds.

1) I would have to buy one to get started integrating it into GLBSE, just the pain of having to wait and the price

2)My users would have to buy one, some would already have them, most would not.

3)GoogleAuth is just about good enough and took me a little over 1/2 a day from first hearing about it to rolling it out. The Yubikey wouldn't even have arrived by then.