RE: Multi Factor Authentication for GIT software

From: ELFORD, Richard (NHS SOUTH, CENTRAL AND WEST COMMISSIONING SUPPORT UNIT) <richard.elford@nhs.net>
Date: Jun 18, 2024, 15:41 UTC
Message-ID: <CWXP265MB30133DAED31B87A03D0AD53481CE2@CWXP265MB3013.GBRP265.PROD.OUTLOOK.COM>
In-Reply-To: <20240618145729.47d34yxe7gw36jyn@carbon>

Hi Konstantin

That is very helpful - thank you.

I will pick this up with our IT people and find out what use cases we have, and then get in touch with any third parties as you say.

I really, really appreciate your advice.

Best regards

Richard Elford Business Services Manager | Digital, Data and Technology NHS South, Central and West Third Floor - 360 Bristol – Three Six Zero, Marlborough Street, Bristol, BS1 3NX

Call me on MS Teams T: 07785 601602 E: richard.elford@nhs.net

-----Original Message-----
From: Konstantin Khomoutov <kostix@bswap.ru>
Sent: Tuesday, June 18, 2024 3:57 PM
To: ELFORD, Richard (NHS SOUTH, CENTRAL AND WEST COMMISSIONING SUPPORT UNIT) <richard.elford@nhs.net>
Cc: git@vger.kernel.org; Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Subject: Re: Multi Factor Authentication for GIT software

[You don't often get email from kostix@bswap.ru. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

This message originated from outside of NHSmail. Please do not click links or open attachments unless you recognise the sender and know the content is safe.

On Tue, Jun 18, 2024 at 09:41:05AM -0400, Konstantin Ryabitsev wrote:

> On Tue, Jun 18, 2024 at 12:19:19PM GMT, ELFORD, Richard (NHS SOUTH,
> CENTRAL AND WEST COMMISSIONING SUPPORT UNIT) wrote:

[...]

Show 8 quoted lines

> > I am writing to enquire about multi factor authentication on cloud
> > hosted software.
> > protect sensitive data, we are seeking information related to the
> > NHS England Multi-Factor Authentication (MFA) Policy with regards to
> > software products which we have from your company.
>
> There is no company, so this questionnaire is not relevant. Git is an
> open-source project without any one particular entity "owning" it.

Richard, I'd like to make a remark. May be - just may be - you're confusing Git and Github or GitLab. Git is a free and open source (F/OSS) piece of software, while Github and GitLab (and a plethora of others) are Git hosting solutions which host Git repositories "in the cloud". They use Git but have no other relation to it.

So you might want to first check with your IT personnel to make it absolutely sure what really is the issue to discuss: Git-based solutions maintained by NHS itself or Git-based solutions provided by 3rd parties. In the latter case, the questions like yours should probably be directed to these parties.

************************************************************************************** ******************************

This message may contain confidential information. If you are not the intended recipient please: i) inform the sender that you have received the message in error before deleting it; and ii) do not disclose, copy or distribute information in this e-mail or take any action in relation to its content (to do so is strictly prohibited and may be unlawful). Thank you for your co-operation.

NHSmail is the secure email, collaboration and directory service available for all NHS staff in England. NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and other accredited email services.

For more information and to find out how you can switch visit Joining NHSmail – NHSmail Support<https://support.nhs.net/article-categories/joining-nhsmail/>