What I really want/care about is banking sites/companies. If this website could also compile a list for these institutions that would be awesome. It truly amazes me how most major banks lack 2fa.
An article on such -- http://bits.blogs.nytimes.com/2008/12/05/a-credit-card-loses...
That said, their own site (at least when I last changed my password) had some fairly silly password rule restrictions like no punctuation.
The German Wikipedia has some pictures: http://de.wikipedia.org/wiki/Transaktionsnummer#chipTAN_comf...
I just went to send a web-form email to my bank about it, and got this error:
> Input contains invalid characters. e.g. angle bracket, quotes, slashes, semicolon.
If a web form doesn't allow basic punctuation, I don't hold out much hope for a two-factor authentication system.