@feld@forgejo Having a verified SSH key is also a form of 2FA. For both occasions, you still need to know the password, so if your SSH key is leaked, it won't give anyone instant access to your account.
@drewdevault@forgejo I hope you don't have to make the same sacrifice as Forgejo does, password being echoed back because PTY allocations are disabled for SSH sessions.
Hello everyone, if you're reading about the #gitea changes. It could benefit to understand the full picture, I've written a summary of what happened today and as well what @dachary, @humanetech and I found out today.