On 2/7/22 16:14, Victor Stinner wrote:
On Tue, Feb 8, 2022 at 12:11 AM Brett Cannon <brett@python.org> wrote:
And to be clear, you only need access to your 2FA solution when you log in; it's not a day-to-day action at all (I personally have not used my 2FA since the last time I logged into a new device for the first time or when my GitHub account was attacked and the attackers exhausted my password attempts for the day).
Even if I'm already logged in in Firefox, GitHub requires me to prove
my identity with 2FA for two actions:

* Access to the Access > Collaborators settings (add/remove people to a project)
* [Delete this repository] button: delete a whole project (code,
issues, everything)

IMO it's a good thing that GitHub requires extra security for these two actions.

Victor


How many times a week are you doing that second one with CPython?


/arry