Summary of password strength discussion

[Matthew Miller]

On Fri, Jul 24, 2015 at 10:48:14AM -0600, Chris Murphy wrote:
> > Still a little esoteric, but provisioning is easier, and people are
> > getting more used to it in general, hopefully. And as a bonus, this
> > jumps us up to level 3 identity assurance, I believe.
> OK, but still not by default. Not everyone has a smart phone. And mine
> runs into this FreeOTP bug:
> https://fedorahosted.org/freeotp/ticket/52
> This stuff has to be opt in, not opt out.

Well, turning on ssh access into the system is puts us into advanced
territory already, doesn't it? And doing _that_ is opt-in.


-- 
Matthew Miller
<mattdm at fedoraproject.org>
Fedora Project Leader