<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
  </head>
  <body>
    <p>For read access you don't need 2FA (= be in the GitHub
      organization). Can you clarify what could go wrong?<br>
    </p>
    <p>- Oleg<br>
    </p>
    <div class="moz-cite-prefix">On 18.3.2020 23.38, Alexandre Rodrigues
      Baldé wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:MR2P264MB0515515A17C250BD7B2E1C89FFF70@MR2P264MB0515.FRAP264.PROD.OUTLOOK.COM">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <meta name="Generator" content="Microsoft Word 15 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:"Yu Gothic";
        panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
        {font-family:"\@Yu Gothic";
        panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
span.DefaultFontHxMailStyle
        {mso-style-name:"Default Font HxMail Style";
        font-family:"Arial",sans-serif;
        color:windowtext;
        font-weight:normal;
        font-style:normal;
        text-decoration:none none;}
.MsoChpDefault
        {mso-style-type:export-only;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style>
      <div class="WordSection1">
        <p class="MsoNormal"><span class="DefaultFontHxMailStyle">This
            is a sensible measure, but I doubt people that contribute to
            GHC via GitHub (even if just for read access) are on this
            maling list.<o:p></o:p></span></p>
        <p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span class="DefaultFontHxMailStyle">Perhaps
            an issue can be created to notify people of this, rather
            than let them run into errors and wonder what they did
            wrong.<o:p></o:p></span></p>
        <p class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p>
      </div>
      <hr style="display:inline-block;width:98%" tabindex="-1">
      <div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
          face="Calibri, sans-serif" color="#000000"><b>De:</b> ghc-devs
          <a class="moz-txt-link-rfc2396E" href="mailto:ghc-devs-bounces@haskell.org"><ghc-devs-bounces@haskell.org></a> em nome de chessai .
          <a class="moz-txt-link-rfc2396E" href="mailto:chessai1996@gmail.com"><chessai1996@gmail.com></a><br>
          <b>Enviado:</b> Wednesday, March 18, 2020 9:28:51 PM<br>
          <b>Para:</b> Carter Schonwald
          <a class="moz-txt-link-rfc2396E" href="mailto:carter.schonwald@gmail.com"><carter.schonwald@gmail.com></a><br>
          <b>Cc:</b> David Feuer <a class="moz-txt-link-rfc2396E" href="mailto:david.feuer@gmail.com"><david.feuer@gmail.com></a>; Haskell
          Libraries <a class="moz-txt-link-rfc2396E" href="mailto:libraries@haskell.org"><libraries@haskell.org></a>; ghc-devs
          <a class="moz-txt-link-rfc2396E" href="mailto:ghc-devs@haskell.org"><ghc-devs@haskell.org></a>;
          <a class="moz-txt-link-abbreviated" href="mailto:core-libraries-committee@haskell.org">core-libraries-committee@haskell.org</a>
          <a class="moz-txt-link-rfc2396E" href="mailto:core-libraries-committee@haskell.org"><core-libraries-committee@haskell.org></a><br>
          <b>Assunto:</b> Re: [core libraries] Re: intent to enable 2fa
          requirement for github.com/haskell org</font>
        <div> </div>
      </div>
      <div>
        <div dir="auto">I agree with Carter here, 2FA is very accessible
          and if someone runs into a problem we can just tell them they
          need 2FA. It wouldn't be much more than a 10 minute
          disruption. Perhaps we could send out notice that it will take
          into effect at a certain point, maybe giving people a week or
          two. But we should really have this be mandatory.</div>
        <br>
        <div class="x_gmail_quote">
          <div dir="ltr" class="x_gmail_attr">On Wed, Mar 18, 2020, 1:09
            PM Carter Schonwald <<a
              href="mailto:carter.schonwald@gmail.com"
              moz-do-not-send="true">carter.schonwald@gmail.com</a>>
            wrote:<br>
          </div>
          <blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex;
            border-left:1px #ccc solid; padding-left:1ex">
            <div dir="ltr">true, otoh, 2fa in various usable forms has
              been widely available for years, and we can reonboard
              people pretty easily. Its critical haskell infra and to
              the best of my knowledge, current 2fa tooling is pretty
              accessible to everyone globally. If someone has specific
              issues we can address them as they arise! </div>
            <br>
            <div class="x_gmail_quote">
              <div dir="ltr" class="x_gmail_attr">On Wed, Mar 18, 2020
                at 3:45 PM David Feuer <<a
                  href="mailto:david.feuer@gmail.com" target="_blank"
                  rel="noreferrer" moz-do-not-send="true">david.feuer@gmail.com</a>>
                wrote:<br>
              </div>
              <blockquote class="x_gmail_quote" style="margin:0px 0px
                0px 0.8ex; border-left:1px solid rgb(204,204,204);
                padding-left:1ex">
                <div dir="auto">That's not a lot of lead time.</div>
                <br>
                <div class="x_gmail_quote">
                  <div dir="ltr" class="x_gmail_attr">On Wed, Mar 18,
                    2020, 2:47 PM Carter Schonwald <<a
                      href="mailto:carter.schonwald@gmail.com"
                      target="_blank" rel="noreferrer"
                      moz-do-not-send="true">carter.schonwald@gmail.com</a>>
                    wrote:<br>
                  </div>
                  <blockquote class="x_gmail_quote" style="margin:0px
                    0px 0px 0.8ex; border-left:1px solid
                    rgb(204,204,204); padding-left:1ex">
                    <div dir="ltr">hey everyone, because so much
                      important stuff for the community, it makes sense
                      to add 2fa required for the org, are there any
                      good reasons to either wait to do this, or not do
                      it? Feedback welcome! 
                      <div><br>
                      </div>
                      <div>(if theres no objections i'll do it friday or
                        this weekend, so theres some lead time for
                        anyone who's not setup for that yet)</div>
                      <div><br>
                      </div>
                      <div>Best wishes and great health to all </div>
                      <div>-carter<br>
                      </div>
                    </div>
                    _______________________________________________<br>
                    Libraries mailing list<br>
                    <a href="mailto:Libraries@haskell.org"
                      rel="noreferrer noreferrer" target="_blank"
                      moz-do-not-send="true">Libraries@haskell.org</a><br>
                    <a
                      href="http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries"
                      rel="noreferrer noreferrer noreferrer"
                      target="_blank" moz-do-not-send="true">http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries</a><br>
                  </blockquote>
                </div>
              </blockquote>
            </div>
            -- <br>
            You received this message because you are subscribed to the
            Google Groups "haskell-core-libraries" group.<br>
            To unsubscribe from this group and stop receiving emails
            from it, send an email to
            <a
              href="mailto:haskell-core-libraries+unsubscribe@googlegroups.com"
              target="_blank" rel="noreferrer" moz-do-not-send="true">
              haskell-core-libraries+unsubscribe@googlegroups.com</a>.<br>
            To view this discussion on the web visit <a
href="https://groups.google.com/d/msgid/haskell-core-libraries/CAHYVw0xA-Fzh1G-YUxWtV1HgOg%3D5o4jwYKNOipU-7dpYrYmA-g%40mail.gmail.com?utm_medium=email&utm_source=footer"
              target="_blank" rel="noreferrer" moz-do-not-send="true">
https://groups.google.com/d/msgid/haskell-core-libraries/CAHYVw0xA-Fzh1G-YUxWtV1HgOg%3D5o4jwYKNOipU-7dpYrYmA-g%40mail.gmail.com</a>.<br>
          </blockquote>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
Libraries mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Libraries@haskell.org">Libraries@haskell.org</a>
<a class="moz-txt-link-freetext" href="http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries">http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries</a>
</pre>
    </blockquote>
  </body>
</html>