MFA

[SoniEx2]

Multi-factor authentication

For MFA to work, we need a few things:

1. SASL TOTP.
2. SASL TOKEN. (Or would you like to re-enter your TOTP every time a netsplit happens?)
3. A way to communicate tokens to clients. (We don't call them cookies to bypass EU regulations. Also IRC clients don't work like browsers (yet), so there are no privacy concerns.)
4. A way to require the client to do TOTP.
5. Make clients and bouncers implement this.

I have no idea how to implement any of them.