在 Mon, Aug 24, 2026 at 11:27:49PM +0200，Cynthia Rey 写道： > [...] > > AUR maintainers could tweak the SSH server's configuration to support MFA, > requesting a TOTP code before any operation can be performed over SSH > (read-only operations like `git pull` could be exempt to not make this > infuriating, though that's a bit trickier to do I recon).
This would block automatic scripts from updating packages. If an AUR maintainer has a release script that updates their packages after running e.g. build and test scripts for some time, they are also unlikely to complete the MFA step in time. (This reminds me of the sudo-loop trick some AUR helper uses.) -- Best regards, lilydjwg
