On Fri, Jul 24, 2015 at 10:48:14AM -0600, Chris Murphy wrote:
> Still a little esoteric, but provisioning is easier, and people
are
> getting more used to it in general, hopefully. And as a bonus, this
> jumps us up to level 3 identity assurance, I believe.
OK, but still not by default. Not everyone has a smart phone. And mine
runs into this FreeOTP bug:
https://fedorahosted.org/freeotp/ticket/52
This stuff has to be opt in, not opt out.
Well, turning on ssh access into the system is puts us into advanced
territory already, doesn't it? And doing _that_ is opt-in.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader