[arch-devops] Hetzner billing handover to SPI

[Levente Polyak]

On 3/30/20 8:11 PM, Giancarlo Razzolini wrote:
> Em março 30, 2020 15:07 Levente Polyak via arch-devops escreveu:
>> Hey folks,
>>
>> we have been discussing this in a small round and want to transition the
>> hetzner billing directly to SPI. This requires them to access the
>> account once to insert the billing data in the accounting page.
>>
>> All this will be done in a secure manner, however even through we have
>> two-factor in place we may want to change the password afterwards.
>>
>> cheers,
>> Levente
>>
>>
> 
> Did we ever explore the virtual card number option with them, at all? I'm
> not comfortable with this, but as long as there's no other option, we do it
> and change password and 2FA master seed.
> 
> Regards,
> Giancarlo Razzolini


Neither do I, but no, there is no virtual credit card or other option
available. We won't hand over the 2FA seed so nobody will need to change
their 2FA setup.

I tried finding a better way, but there is none :S We already trust SPI
with our value, so I don't think this is really an issue if we swap the
first-factor afterwards.

cheers,
Levente

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-devops/attachments/20200330/61935bdc/attachment.sig>