This was a form of two-factor authentication. There was a certificate and a password and Snowden apparently obtained both. There are obviously other types of 2

This was a form of two-factor authentication. There was a certificate and a password and Snowden apparently obtained both. There are obviously other types of 2FA that would have prevented this, but it's interesting to note that this qualify as two-factor for many companies.