BMO/Meetings/2015-09-08
From MozillaWiki
- [mcote] Official admin policy (for BMO/Recent Changes) on disabling 2fa and sec-group password resets
- [glob] discuss process for pushing sec fixes without 0day'ing upstream
- justdave said they used to update the webheads directly, and sort things out once the upstream fix was released
- [glob] overview/demo of 2fa flow with token-bound state, and probably a rant about TINYTEXT