On Sun, Sep 4, 2022 at 1:53 AM Richard Shaw <hobbes1069@xxxxxxxxx> wrote: > Is it that big of a deal to require some sort of practical affirmation on an annual basis? It could be completely automated. > > Am I way off base here? I don't think so, with some extensions. I still assert that PP's that do not have and use a "PassKey" (Apple's rebranding of FIDO2 multifactor (Apple is great about branding)) should regularly (once a year?) need to reaffirm "I'm not dead (yet)", while those with an enrolled PassKey should be able to only revalidate when then hit one/more of the other criteria, as their account is highly protected against abuse. _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
