@janneke there are ways that work sort of like this though, like fido2 or u2f. i'm not actually super sure of any technical reason why an ssh key specifically couldn't be used in this case, but i think it mostly has to do with web standards and commonly adopted APIs to access that stuff. it would require support from every browser vendor to implement it.