ossf / great-mfa-project

The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute hardware MFA tokens to critical open source software (OSS) projects.
Other
53 stars 14 forks source link

Token Distribution: Determine how we will get the tokens from the origin point to the end user recipient #3

Closed jenniferfernick closed 2 years ago

jenniferfernick commented 3 years ago

Also: we need to ensure we've threat modelled this and minimized risks of compromise

SecurityCRob commented 2 years ago

Distribution will be handled by the two donors (GitHub and Google) through a coupon/code store mechanism. This is laid out in our README.md