Re: PyPI security work: multifactor auth progress & help needed

Is webauthn the multi-factor / 2FA spec to implement now? It's now
approved; so while you experts are working on it it may be worth a look to
just implement webauthn while we have funding for experts

https://www.w3.org/TR/webauthn/

Discourse mentions FIDO. FIDO2 is webauthn, AFAIU.

There are a number of implementations:

https://pypi.org/search/?q=webauthn

https://github.com/topics/webauthn

On Friday, March 22, 2019, Sumana Harihareswara <[email protected]> wrote:

> Work has started on the Open Technology Fund-supported project to improve
> Warehouse security, accessibility, and internationalization. More details
> in today's progress report:
>
> https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-
> help-needed/1042/2
>
>
> best,
> Sumana Harihareswara
> Warehouse project manager
> Changeset Consulting
> --
> Distutils-SIG mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> https://mail.python.org/mailman3/lists/distutils-sig.python.org/
> Message archived at https://mail.python.org/archives/list/distutils-sig@
> python.org/message/3E64P4GNVFSG4JA42OITJUCYU5H3QLAZ/
>

--
Distutils-SIG mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at https://mail.python.org/archives/list/[email protected]/message/EPQTPF6HKANBRKCE33D7BLNL4VBY2MWC/