Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Requiring MFA on popular gem maintainers. Parent comment
This is exactly what we did for PyPI: we allow the user to enroll as many 2FA factors as they'd like, of both supported types (TOTP and WebAuthn).
The post is dated 2019, but the summary of practices we wrote here[1] is still relevant (and IMO, correct).
[1]: https://blog.trailofbits.com/2019/06/20/getting-2fa-right-in...
There are no comments on this comment yet.
This is exactly what we did for PyPI: we allow the user to enroll as many 2FA factors as they'd like, of both supported types (TOTP and WebAuthn).
The post is dated 2019, but the summary of practices we wrote here[1] is still relevant (and IMO, correct).
[1]: https://blog.trailofbits.com/2019/06/20/getting-2fa-right-in...