Uploaded August 2026 | Updated September 2026, 1 hour ago

---

Deferred 2FA for Packagers Proposal

This is an auto-generated summary of the FRCL call on 2026-08-26:

Community leaders discussed implementing 2 factor authentication across infrastructure and identified necessary stability and technical improvements.

Current Mandate and Challenges
Existing mandates for proven packagers face manual enforcement hurdles and reliance on unstable identity infrastructure. Recent technical issues in identity clusters currently prevent broader adoption.

Infrastructure and Technical Blockers
The current system lacks self service recovery and hardware security key support. Automating enforcement within the authentication stack remains a critical prerequisite for future expansion.

Long Term Security Roadmap
The group prioritized developing a comprehensive work breakdown to address infrastructure blockers and improve audit transparency. Improving detection mechanisms will proceed alongside authentication rollout planning.

Jira Epic: redhat.atlassian.net/browse/FRCL-86
Gemini AI Summary: docs.google.com/document/d/1IaQeb1B0rKoGRgsjXu5_MyQ1U94fpcUVsZlVIqZhZLs/edit?usp=meet_tnfm_calendar