Re: Debian two-factor auth, GSoC?
On 04/12/2013 03:25 AM, Tollef Fog Heen wrote:
> The Yubikey neo can run the java applet thingies, it seems, so it can
> act as a GPG token too.
Please, please, please ... no java!!!
That's a security nightmare. I think we'd be less safe with
than without it.
Also, while I think the idea is nice, and that it would be a nice
thing to *propose* it to all DDs, I think it would be annoying
to actually *require* 2 factors auth from DDs (especially with
the ssh keys on Alioth).