Gitlab update, 2FA now mandatory

[Ingo Klöcker]

On Montag, 24. Oktober 2022 09:19:49 CEST Christoph Cullmann (cullmann.io) 
wrote:
> I think it is rather worse that now first time contributors have this
> requirement.

Do you have proof for this, e.g. a study, or is this just your Bauchgefühl 
(gut feeling)?

There is plenty of proof (e.g. TBs of leaked password databases) that lots of 
people use insecure passwords and that lots of people reuse the same "secure" 
password everywhere. 2FA protects those ignorant people. If the 2FA-
requirement on invent helps to make more people aware of 2FA, then that's a 
good side-effect.

Besides, my hope is that with FIDO2 "soon" passwords will be a relic of the 
past.

Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-community/attachments/20221024/646cc700/attachment.sig>