[core libraries] Re: intent to enable 2fa requirement for github.com/haskell org

[Carter Schonwald]

theres a reason i emailed ghc-devs + libraries, to make sure its visible!

we can remediate any perms that get busted that need to be reinstated, but
its been sitting like it is for long enough :)

On Wed, Mar 18, 2020 at 5:38 PM Alexandre Rodrigues Baldé <
alexandreR_B at outlook.com> wrote:

> This is a sensible measure, but I doubt people that contribute to GHC via
> GitHub (even if just for read access) are on this maling list.
>
>
>
> Perhaps an issue can be created to notify people of this, rather than let
> them run into errors and wonder what they did wrong.
>
>
> ------------------------------
> *De:* ghc-devs <ghc-devs-bounces at haskell.org> em nome de chessai . <
> chessai1996 at gmail.com>
> *Enviado:* Wednesday, March 18, 2020 9:28:51 PM
> *Para:* Carter Schonwald <carter.schonwald at gmail.com>
> *Cc:* David Feuer <david.feuer at gmail.com>; Haskell Libraries <
> libraries at haskell.org>; ghc-devs <ghc-devs at haskell.org>;
> core-libraries-committee at haskell.org <core-libraries-committee at haskell.org
> >
> *Assunto:* Re: [core libraries] Re: intent to enable 2fa requirement for
> github.com/haskell org
>
> I agree with Carter here, 2FA is very accessible and if someone runs into
> a problem we can just tell them they need 2FA. It wouldn't be much more
> than a 10 minute disruption. Perhaps we could send out notice that it will
> take into effect at a certain point, maybe giving people a week or two. But
> we should really have this be mandatory.
>
> On Wed, Mar 18, 2020, 1:09 PM Carter Schonwald <carter.schonwald at gmail.com>
> wrote:
>
> true, otoh, 2fa in various usable forms has been widely available for
> years, and we can reonboard people pretty easily. Its critical haskell
> infra and to the best of my knowledge, current 2fa tooling is pretty
> accessible to everyone globally. If someone has specific issues we can
> address them as they arise!
>
> On Wed, Mar 18, 2020 at 3:45 PM David Feuer <david.feuer at gmail.com> wrote:
>
> That's not a lot of lead time.
>
> On Wed, Mar 18, 2020, 2:47 PM Carter Schonwald <carter.schonwald at gmail.com>
> wrote:
>
> hey everyone, because so much important stuff for the community, it makes
> sense to add 2fa required for the org, are there any good reasons to either
> wait to do this, or not do it? Feedback welcome!
>
> (if theres no objections i'll do it friday or this weekend, so theres some
> lead time for anyone who's not setup for that yet)
>
> Best wishes and great health to all
> -carter
> _______________________________________________
> Libraries mailing list
> Libraries at haskell.org
> http://mail.haskell.org/cgi-bin/mailman/listinfo/libraries
>
> --
> You received this message because you are subscribed to the Google Groups
> "haskell-core-libraries" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to haskell-core-libraries+unsubscribe at googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/haskell-core-libraries/CAHYVw0xA-Fzh1G-YUxWtV1HgOg%3D5o4jwYKNOipU-7dpYrYmA-g%40mail.gmail.com
> <https://groups.google.com/d/msgid/haskell-core-libraries/CAHYVw0xA-Fzh1G-YUxWtV1HgOg%3D5o4jwYKNOipU-7dpYrYmA-g%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.haskell.org/pipermail/ghc-devs/attachments/20200318/92b566d1/attachment.html>