Hacker News Reader

I've had this idea before, nice to see it implemented. The reason I've never pursued it as I'm not quite sure what the actual user experience or benefit over traditional 2FA systems is.

View on HN

I wouldn't mind if my hosting providers offered this in lieu of password auth. All my servers are already pubkey-authentication only and I always have my keys/an SSH client handy

User experience is in the eye of the beholder. My gut tells me the relevant beholder is an actual user and ssh login seems like the sort of thing that could be tested to segment user/application pairs into buckets based on the degree of value it adds. I mean, two factor authentication that requires me to shift my focus from my laptop to my phone and back to my laptop isn't always great for flow...too much meat space involved.

None of which is to say that this is a better solution. I don't think ssh over the web is going to have wide application based on the fact that coordinating ssh is still a devops type of exercise.

Reply on news.ycombinator.com