> We are fine to use SSH keys as our only authentication factor for servers… Are we? True 2FA for ssh keeps getting easier. There’s FIDO2 support now for examp

> We are fine to use SSH keys as our only authentication factor for servers… Are we? True 2FA for ssh keeps getting easier. There’s FIDO2 support now for example. The gold standard includes 2FA and I don’t see why that shouldn’t continue filtering down to common practice, just as has already happened with ssh keys.