Episode Details
Back to Episodes
PyPI: 2FA or not 2FA, that is the question
Episode 332
Published 3 years, 7 months ago
Description
Josh and Kurt talk about PyPI mandating two factor authentication for the top 1% of projects. It feels like a simple idea, but it's not when you start to think about it. What problems does 2FA solve? How common are these attacks? What are the second and third order effects of mandating 2FA? This episode should have something for everyone on all sides of this discussion to violently disagree with.