2018-02-08 10:52 AEST by Arthur Barrett - GitHub has apparently implemented 2FA - is this something that would be useful for CVSNT.

See also:
bug 6990	eBook: Authentication/Authorization whitepaper/book (and add to eBook too)
bug 7038	enh: cvsagent authentication via mobile fingerprint authentication (securid)

2018-02-08 11:02 AEST by Arthur Barrett - Created an attachment (id=3206)
setting up git 2fa

This article talks about how to use 2FA with GitHub and the relative security
compared to SSH keys:
https://stackoverflow.com/questions/25550481/git-authentication-fails-after-enabling-2fa


I think on balance that 2FA is less secure than CVSAGENT/CVSNT or PAEGENT/CVSNT
- part of the reason for 2FA on GitHub seems to be that git doesn't do SSH very
well on windows, and doesn't integrate with PAEGENT.

Also see this article about Uber ditching GitHub because of security breach:
https://www.theregister.co.uk/2018/02/07/uber_quit_github_for_custom_code_after_2016_data_breach/