why oh why can't we authenticate against web sites with ssh keys (and ssh-agent)?
yeah, keys can be copied. one can also copy a FreeOTP+ token
it feels so much like security theater :-(
like a scam to stop people from automating stuff so that we can't compete with those who don't self-impose such roadblocks