Kushal Das

These 9 positions are good enough to have.

It is currently missing Content information like from a feed like http://blog.joemcnally.com/feed/ It is only showing part of the HTML as content for each Item.

Few open questions/points: - If we keep all the wheels in the [securedrop-debian-packaging]() repository, we have to clone it during the package build process. This may slow down the whole...

One good point of having all wheel from a particular OS into separate directory is that we can also separate out the tests in CI machines running the same OS...

This branch https://github.com/freedomofpress/securedrop-debian-packaging/tree/wheels_on_focal needs to be rebased to latest `securedrop-debian-packaging` repo. And then rebuild the dependencies for app-code.

What about providing 3 backup code(s)? Or do we want more?

Here are a few questions for the design: * The general suggestion is to have separate table to handle backup code logic. Is that okay to add? * Should the...

Backup codes are not part of TOTP spec, so we will have to implement of our own.

> Yeah this seems all around reasonable. Added bonus, if I'm not mistaken we could probably use the same approach for the workstation/launcher/updater RPM package (which would greatly benefit from...

> If I understand correctly, your idea is to allow passing in a custom script which can call certain functions that the user is interested in analysing, inside the sandbox....