On Thursday, 11 August 2016 at 18:44:11 UTC, ketmar wrote:
i'm not using smartphones at all, so no "apps". besides, without sending auth request by some other channel than internet i can't see any value in 2fa at all: how is that different from simply using my ssh key and encrypted internet channel?
Simple your github account manages the SSH keys used to contribute code, it also is what creates pull requests for the contributions to other repos.
GitHub and some others support Fido U2F and that doesn't use an internet channel for auth. Check out Yubico's Yubikey for some good hardware.
