> However, you cannot enforce private key encryption server-side If you could do this, how would it work? If you could use the -sk key types or something simi

> However, you cannot enforce private key encryption server-side If you could do this, how would it work? If you could use the -sk key types or something similar with devices that are built into most computers (like TPM or the Secure Enclave) that would be nice. > you can't even guarantee some kind of 2FA is in place. Yes, ssh does nowadays support FIDO, but that's even more complicated for users... Can't you limit the allowable keytypes to those FIDO ones (currently ecdsa-sk and ed25519-sk)? There's also the old ChallengeResponseAuthentication stuff.