Re: Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Colin Watson
On Tue, Aug 14, 2018 at 01:35:00PM -0500, Simon Quigley wrote: > On 08/14/2018 11:34 AM, Colin Watson wrote: > > How would this work, even conceptually? Some kind of extra challenge > > when doing SFTP uploads or git/bzr pushes to ask for 2FA (and some > > timeout arrangement so that it isn't hope

Re: Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Steve Langasek
On Tue, Aug 14, 2018 at 01:35:00PM -0500, Simon Quigley wrote: > On 08/14/2018 11:34 AM, Colin Watson wrote: > > How would this work, even conceptually? Some kind of extra challenge > > when doing SFTP uploads or git/bzr pushes to ask for 2FA (and some > > timeout arrangement so that it isn't hop

Re: Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Simon Quigley
Hello, On 08/14/2018 11:34 AM, Colin Watson wrote: > How would this work, even conceptually? Some kind of extra challenge > when doing SFTP uploads or git/bzr pushes to ask for 2FA (and some > timeout arrangement so that it isn't hopelessly annoying)? What about > FTP uploads? In my opinion, SF

Re: Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Colin Watson
On Tue, Aug 14, 2018 at 05:18:38PM +0200, Philipp Kern wrote: > - u2f support. I agree that would be useful (https://bugs.launchpad.net/canonical-identity-provider/+bug/1755021). Maybe somebody with skills in this area could look into lp:canonical-identity-provider and see what's involved in addin

Re: Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Colin Watson
On Tue, Aug 14, 2018 at 02:31:05PM +0100, Robie Basak wrote: > Launchpad 2FA is currently opt-in for everyone. However, it has been > mandatory for Canonical employees for a number of years now. Details are > documented here: > > https://help.ubuntu.com/community/SSO/FAQs/2FA > > TOTP and HOT

Re: Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Philipp Kern
On 2018-08-14 15:31, Robie Basak wrote: Launchpad 2FA is currently opt-in for everyone. However, it has been mandatory for Canonical employees for a number of years now. Details are documented here: https://help.ubuntu.com/community/SSO/FAQs/2FA TOTP and HOTP are supported, so this works

Requiring Launchpad 2FA from Ubuntu uploaders

2018-08-14 Thread Robie Basak
Launchpad 2FA is currently opt-in for everyone. However, it has been mandatory for Canonical employees for a number of years now. Details are documented here: https://help.ubuntu.com/community/SSO/FAQs/2FA TOTP and HOTP are supported, so this works with hardware authenticators such as Yubikey