Require MFA on PyPI?

[dustin (Dustin Ingram)]

@sumanah

Add ability to require 2FA for a given project – this is done as a feature flag, but not yet deployed anywhere, I think. @dustin and @EWDurbin and @woodruffw - is this deployed on Test PyPI, and if not, maybe we should do so?

This is waiting on the rollout of some additional changes to be launched simultaneously: Models, views, tasks, etc for critical projects promo by di · Pull Request #10856 · pypi/warehouse · GitHub

@sumanah

Require API Tokens for upload if 2FA is enabled – not yet implemented. That plus other token-related development is now in the Fundables list.

It’s essentially done, we just need to change the current notification of pending failure to an actual failure. Since we notified on Feb 25th, I think a ~6 month window suffices and we can resolve this sometime after Aug 25.