Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add MFA "UI only" removal blog post #119

Merged
merged 1 commit into from
Aug 23, 2022

Conversation

kevinlinxc
Copy link
Contributor

@kevinlinxc kevinlinxc commented Jul 19, 2022

Summary

Part of Deprecate ui_only and migrate users to ui_and_gem_signin, an effort to remove the UI only MFA level for Rubygems which has been deemed insecure.

Users can no longer change their MFA level to UI Only after rubygems/rubygems.org#3084 was merged about a month ago, and this blog post explains why.

Dates:

I picked the following dates somewhat arbitrarily and would like to know if they are fine:
July 26th for the blog post date
August 26th for the day of UI only -> UI and gem signin migration

Related

When this blog post is out, it could be linked in this guide PR too: rubygems/guides#311

@kevinlinxc
Copy link
Contributor Author

Preview:
image

Precedent for having two authors, although it looks weird next to a single portrait: https://github.com/rubygems/rubygems.github.io/blob/master/_posts/2018-02-24-tls-10-and-11-deprecation-notice.md?plain=1#L4

Copy link
Member

@jenshenny jenshenny left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✨ I think a month is reasonable for this change (but I don't have any prior context to say otherwise).

You can leave my name off of the authors imo since this was mainly your work (ie. the blog post and the feature).

_posts/2022-07-26-mfa-ui-only-removed.md Outdated Show resolved Hide resolved
Copy link

@jchestershopify jchestershopify left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two small tweaks but otherwise LGTM.

_posts/2022-08-22-mfa-ui-only-removed.md Outdated Show resolved Hide resolved
_posts/2022-08-22-mfa-ui-only-removed.md Outdated Show resolved Hide resolved
@kevinlinxc
Copy link
Contributor Author

@sonalkr132 Do you think this is ready to put out? The date is set for today.

@sonalkr132 sonalkr132 merged commit 49662a5 into rubygems:master Aug 23, 2022
@sonalkr132
Copy link
Member

Awesome. thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants