[themoonisachees]

If we really wanted MFA, we could roll a PAM module, and whatever pushes SSH authorized keys could also push MFA seeds. But IMO this would protect against very unusual attacks and annoy ssh agents users everywhere.

[throwawaymobule]

Doing MFA for ssh like that would satisfy some compliance issues, wherever that matters. Probably key+pass.

[siilikuin]

Lol. I actually use `ssh` with 2FA at my own job, I was just having some fun nerdsniping. You're right, it's very valuable for compliance reasons